CN109743180A

CN109743180A - Proxy signature method based on state secrets

Info

Publication number: CN109743180A
Application number: CN201910008410.3A
Authority: CN
Inventors: 彭长根; 魏自强; 张爽; 王艳; 方粘粘
Original assignee: Guizhou University
Current assignee: Guizhou University
Priority date: 2019-01-04
Filing date: 2019-01-04
Publication date: 2019-05-10

Abstract

The invention discloses an agent signature method based on national secrets. The present invention can well solve the problem of signature and authentication under special circumstances. And the operability is good, which can ensure the unforgeability of the signature, and the identity of the proxy signer can be recovered in the event of a dispute, which satisfies the non-repudiation of the original signer and the proxy signer. And can limit the scope of the rights of the agent signer and the time range of the agent's signature.

Description

Based on state it is close act on behalf of signature method

Technical field

The present invention relates to computer security technical field, it is specially a kind of based on state it is close act on behalf of signature method.

Background technique

It can have both the double action of traditional seal and digital signature to Electronic Signature, in identification all person of Electronic Signature Part, it guarantees data integrity, also there is anti-tamper function on the basis of genuineness of document, signature reliability, document validity, it is right Signature owner has editable, manageable function.But in some special circumstances, such as stamped signature people needs when going on business Stamped signature is carried out to document, at this point, limitation is very big for traditional Electronic Signature scheme, therefore allograph strategy is answered With in Electronic Signature, can be very good to meet above-mentioned special circumstances, also can promote the development of e-commerce and e-government.

Summary of the invention

In view of the deficiencies of the prior art, the present invention provides it is a kind of based on state it is close act on behalf of signature method, it can be good Solve the problems, such as stamped signature in special circumstances and authentication question.And operability is good.

In order to achieve the above object, the present invention is achieved by the following technical programs: based on state it is close act on behalf of signature method, The stamped signature right of oneself is entrusted to and acts on behalf of stamped signature people by original stamped signature people, and the stamped signature people that acts on behalf of for obtaining the commission of stamped signature right represents original Beginning stamped signature life is embedded into stamped signature at digital signature, and by Proxy Digital Signature, carries out acting on behalf of stamped signature person's stamped signature process, and Identifier verifies the validity of allograph during person's stamped signature of acting on behalf of stamped signature.

Concrete operations include the following steps:

1) it initializes: selected stamped signature security parameter, original stamped signature person and the key pair for the person that acts on behalf of stamped signature；

2) original stamped signature person licensing process: original stamped signature person passes through original stamped signature person public key, person's public key of acting on behalf of stamped signature, original Stamped signature person private key and the certificate of authority authorize to generate；

3) verifying authorization: acting on behalf of stamped signature, person verifies whether authorization is legal, and verifying is not by terminating stamped signature；When being verified Make, carries out next step operation；

4) allograph: acting on behalf of after stamped signature people passes through, and is plucked by the Hash of act on behalf of stamped signature person's private key, authorization and electronic document Generate allograph；

5) watermark is embedded in: allograph being embedded into seal picture by watermarking algorithm, is formed with agency's label Name acts on behalf of E-seal；

6) document agent stamped signature person carries out capping step 5 to document) act on behalf of seal, form the electronics text after agency affixes one's seal Shelves；

7) verification process of stamped signature is acted on behalf of:

A) extract seal: the E-seal in electronic document after agency is affixed one's seal extracts, and obtains E-seal；

B) watermarking agent signature extracts: extracting the allograph in E-seal using watermark extraction algorithm；

C) act on behalf of stamped signature verifying: by the Hash abstract of electronic document, allograph, the certificate of authority, acting on behalf of stamped signature, person is public Key and original stamped signature person public key carry out acting on behalf of stamped signature verifying；Effectively, then it is effective to act on behalf of stamped signature for verifying, and it is invalid otherwise to act on behalf of stamped signature.

The certificate of authority described in the step 2) and step c) includes original stamped signature person identity information, the person that acts on behalf of stamped signature Interest field and the time restriction for acting on behalf of stamped signature.

Beneficial effect

Compared with prior art, the present invention can solve stamped signature problem and authentication question in special circumstances.And it can grasp The property made is good, can guarantee the unforgeable of stamped signature, and the identity for the person that acts on behalf of stamped signature when disputing on can recover, and meets former The non-repudiation of beginning stamped signature person and the person that acts on behalf of stamped signature.And the time model that person's interest field of acting on behalf of stamped signature can be limited and act on behalf of stamped signature It encloses.

Detailed description of the invention

Fig. 1 is the flow chart for acting on behalf of stamped signature of the invention；

Fig. 2 is the flow chart that stamped signature is acted on behalf of in present invention verifying.

Specific embodiment

Below will with national standard SM2, SM3, invention is further explained, but be not intended as restriction of the invention.

The embodiment of the present invention 1: based on state it is close act on behalf of signature method, wherein original stamped signature person, the person that acts on behalf of stamped signature are from can The third party of letter obtains SM2 key pair.

1) stamped signature security parameter is selected, original stamped signature person is generated, person's SM2 key pair of acting on behalf of stamped signature.

2) original stamped signature person passes through original stamped signature person public key, act on behalf of stamped signature person's public key, original stamped signature person private key and warrant Book authorizes to generate.Wherein the certificate of authority includes original stamped signature person identity information, person's interest field of acting on behalf of stamped signature and acts on behalf of stamped signature Time restriction etc..Such as: 2 months 2018 on March 1st, 1 day 1, Lee was to the commission of internal and more Low Security Level file in generation Stamped signature person Zhang's stamped signature is managed, acting on behalf of stamped signature, person Zhang is effective to authority institute stamped signature.Wherein, the time of stamped signature is acted on behalf of: 2018 2 months on March 1st, 1 day 1 of year；Person's interest field of acting on behalf of stamped signature: internal and more Low Security Level file；Original stamped signature person: Lee； The person Zhang that acts on behalf of stamped signature.

3) person that acts on behalf of stamped signature verifies whether authorization is legal, and verifying is by terminating stamped signature；Make when being verified, carries out next Step operation.

4) abstract of electronic document is generated using national standard SM3.

5) stamped signature people is acted on behalf of to pass through, person's private key of acting on behalf of stamped signature, authorization, electronic document summarization generation allograph.

6) allograph is embedded into seal picture by watermarking algorithm, forms agency's electricity with allograph Sub- seal.

7) person that acts on behalf of stamped signature covers and acts on behalf of seal.

8) electronic document after agency affixes one's seal is formed.

8) act on behalf of the verification process of stamped signature: the E-seal in electronic document after agency is affixed one's seal extracts, and obtains E-seal.The allograph in E-seal is extracted using watermark extraction algorithm.By SM3 generate electronic document abstract, Allograph, the certificate of authority, person's public key of acting on behalf of stamped signature, original stamped signature person public key carry out acting on behalf of stamped signature verifying.Verifying is effective, then generation It is effective to manage stamped signature, it is invalid otherwise to act on behalf of stamped signature.

It although an embodiment of the present invention has been shown and described, for the ordinary skill in the art, can be with A variety of variations, modification, replacement can be carried out to these embodiments without departing from the principles and spirit of the present invention by understanding And modification, the scope of the present invention is defined by the appended.

Claims

1. a kind of agency signature method based on state secret, it is characterized in that: the original signer entrusts his signature right to the agency signer, and the agency signer that obtains the entrustment of the signature right generates on behalf of the original signer. Digital signature, and the proxy digital signature is embedded in the signature, the proxy signer's signature process is performed, and the verifier verifies the validity of the proxy signature during the proxy signer's signature process.

2. the agency signature method based on state secret according to claim 1, is characterized in that, concrete operation comprises the steps:

1) Initialization: Select the signature security parameters, the key pair of the original signer and the proxy signer;

2) Authorization process of the original signer: The original signer generates authorization through the original signer's public key, the proxy signer's public key, the original signer's private key and the authorization certificate;

3) Verify authorization: The agent signer verifies whether the authorization is legal, and if the verification fails, the signature is ended; when the verification is passed, the next step is performed;

4) Proxy signature: After the proxy signer passes, the proxy signature is generated through the proxy signer's private key, authorization and Hash digest of the electronic document;

5) Watermark embedding: the proxy signature is embedded in the seal image through the watermark embedding algorithm to form a proxy electronic seal with the proxy signature;

6) Affixing the agency seal: the document agency signer affixes the agency seal of step 5) to the document to form an electronic document after the agency seal;

7) The verification process of the agent's signature:

a) Extract seal: extract the electronic seal from the electronic document sealed by the agent to obtain the electronic seal;

b) Watermark proxy signature extraction: extract the proxy signature in the electronic seal by using the watermark extraction algorithm;

c) Proxy signature verification: the proxy signature verification is performed through the Hash digest, proxy signature, authorization certificate, proxy signer public key and original signer public key of the electronic document; if the verification is valid, the proxy signature is valid, otherwise the proxy Signature is invalid.

3. The personal cloud storage data safe device of localized encryption protection according to claim 2, is characterized in that: the authorization certificate described in described step 2) and step c) comprises original signer identity information, agent The scope of the signer's rights and the time limit for the agent's signing.