KR102474628B1 - Method for signcrytion using functional signature and computing device for executing the method - Google Patents

Abstract

A signature encryption method using a function signature and a computing device for performing the same are disclosed. A signature encryption method according to an embodiment disclosed herein is a method performed in a computing device having one or more processors and a memory for storing one or more programs executed by the one or more processors, and includes a signature scheme. Operation of setting a pair of master signing key (msk) and master verification key (mvk) using the setup algorithm of, master signing key (msk) and functional signature (Functional Signature) An operation of generating a signing key (sk _f ) for function (f) based on function (f), and a function (f) of the function signature, a signing key (sk f ) for function ( _f ), and a message and generating a function value (f(m)) and a final signature value (σ) for the message based on (m).

Description

Signature encryption method using function signature and computing device for performing the same

Embodiments of the present invention relate to signature encryption techniques.

BACKGROUND OF THE INVENTION Recently, with the development of communication technology, the use of digital messages is increasing. In other words, with the development of the Internet, e-mails or SNS messages are exchanged anytime, anywhere, and information collection activities are carried out through the Internet. The use of the Internet has increased the convenience, economic feasibility, and efficiency of life, but the openness of the Internet remains at risk of forgery and falsification of electronic transaction information and leakage of personal information.

Accordingly, cryptograms for secure and authenticated communication are used to prevent forgery of messages and to maintain confidentiality of messages. In addition, electronic signatures are being introduced along with these encryption technologies. Digital signatures are message authentication to ensure the integrity of messages exchanged and transmitted between computer systems through communication networks such as the Internet, and user authentication to guarantee the user who has performed actions such as creation, processing, transmission, storage, and reception of the message. It can be defined as a security technology or means that combines the functions of

On the other hand, many studies related to electronic signatures are being conducted, but there is a continuous demand for safe, convenient, reliable, new and efficient electronic signature verification and electronic signature measures or countermeasures through this.

Korea Patent Registration No. 10-1253683 (2013.04.11)

An embodiment of the present invention is to provide a signature encryption method using a function signature of a new technique and a computing device for performing the same.

A signature encryption method according to an embodiment disclosed herein is a method performed in a computing device having one or more processors and a memory storing one or more programs executed by the one or more processors, and includes a signature scheme (Signature Scheme Setting a pair of master signing key (msk) and master verification key (mvk) using a setup algorithm of ); generating a signing key (sk _f ) for the function (f) based on the master signing key (msk) and the function (f) of the functional signature; and a function value f(m) for the message based on the function f of the function signature, the signing key sk _f for the function f, and the message m, and a final signature value ( σ).

The function (f) of the function signature may be set as a public key or a symmetric key for encryption.

The operation of generating the signing key (sk _f ) for the function (f) uses a setup algorithm of the signature scheme to generate a pair of a signing key (sk) and a verification key (vk) action to set; A signature value (σ vk ) of the verification key is obtained by applying the signature algorithm of the signature system to the master signing key (msk), the function (f) of the function signature, and the verification key ( _vk ). action to calculate; generating a certificate (c) based on the function (f) of the function signature, the verification key (vk), and a signature value (σ _vk ) for the verification key; and generating a signing key (sk _f ) for the function (f) based on the signing key (sk) and the certificate (c).

The operation of calculating the signature value (σ _vk ) for the verification key is a value (f|vk) obtained by concatenating the verification key (vk) to the function (f) with the master signing key (msk). It is possible to calculate a signature value (σ _vk ) for the verification key by signing .

The operation of generating the function value (f(m)) and the final signature value (σ) for the message is performed by applying the signature algorithm of the signature scheme to the message (m) and the signing key (sk). Calculating a signature value (σ _m ) for ; applying the message (m) to the function (f) to generate a function value (f(m)) for the message; and generating the final signature value (σ) based on the message (m), the certificate (c), and the signature value (σ _m ) for the message.

The operation of generating the function value (f(m)) and the final signature value (σ) for the message is to set the signing key (sk _f ) for the function (f) to the signing key (sk) and the certificate. An operation of parsing with (c) may be further included.

The signature encryption method further includes transmitting the function value (f(m)) and the final signature value (σ) of the message to another computing device, wherein the other computing device includes the master verification key ( Based on mvk), an operation of verifying the function value (f(m)) and the final signature value (σ) of the message may be performed.

The verifying operation may include parsing the final signature value σ into the message m, the certificate c = (f, vk, σ _vk ), and the signature value σ _m of the message. ; generating a function value (f(m)) for the message by applying the parsed message (m) to the function (f); and checking whether the function value f(m) of the generated message matches the function value f(m) of the message received from the computing device.

The verifying operation may further include verifying the signature value σ _m of the parsed message by applying the message m and the verification key vk to a verification algorithm of the signature scheme. .

The verifying operation is performed by applying a value (f|vk) obtained by concatenating a function (f) to the master verification key (mvk) and the verification key (vk) to the verification algorithm of the signature scheme and performing the parsing. An operation of verifying the signature value (σ _vk ) of the verification key may be further included.

A computing device according to an embodiment disclosed herein includes one or more processors; Memory; and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, and the one or more programs are mastered using a setup algorithm of a signature scheme. instructions for establishing a pair of master signing key (msk) and master verification key (mvk); a command for generating a signing key (sk _f ) for the function (f) based on the master signing key (msk) and the function (f) of the functional signature; and a function value f(m) for the message based on the function f of the function signature, the signing key sk _f for the function f, and the message m, and a final signature value ( σ).

The function (f) of the function signature may be set as a public key or a symmetric key for encryption.

The command for generating the signing key (sk _f ) for the function (f) is a pair of a signing key (sk) and a verification key (vk) using the setup algorithm of the signature scheme command to set; A signature value (σ vk ) of the verification key is obtained by applying the signature algorithm of the signature system to the master signing key (msk), the function (f) of the function signature, and the verification key ( _vk ). command to calculate; an instruction for generating a certificate (c) based on the function (f) of the function signature, the verification key (vk), and a signature value (σ _vk ) for the verification key; and a command for generating a signing key (sk _f ) for the function (f) based on the signing key (sk) and the certificate (c).

The command for calculating the signature value (σ _vk ) for the verification key is the concatenated value (f|vk) of the verification key (vk) to the function (f) with the master signing key (msk). ) can be signed to calculate the signature value (σ _vk ) for the verification key.

The command for generating the function value (f(m)) and the final signature value (σ) for the message applies the signature algorithm of the signature scheme to the message (m) and the signing key (sk), instructions for calculating a signature value (σ _m ) for the message; instructions for applying the message (m) to the function (f) to produce a function value (f(m)) for the message; and a command for generating the final signature value σ based on the message m, the certificate c, and the signature value σ _m for the message.

The command for generating the function value (f(m)) and the final signature value (σ) for the message includes the signing key (sk f ) for the function (f) and the signing key (sk ₎ . It may further include a command for parsing with certificate (c).

The one or more programs further include instructions for transmitting the function value (f(m)) and the final signature value (σ) for the message to another computing device, wherein the other computing device, the master verification key Based on (mvk), the function value f(m) for the message and the final signature value σ can be verified.

The other computing device parses the final signature value (σ) into the message (m), the certificate (c = (f, vk, σ _vk )), and the signature value (σ _m ) for the message, The function value (f(m)) for the message is generated by applying the parsed message (m) to the function (f), and the function value (f(m)) for the generated message is the computing device It can be checked whether it matches the function value (f(m)) for the message received from .

The other computing device may verify the signature value σ _m of the parsed message by applying the message m and the verification key vk to a verification algorithm of the signature scheme.

The other computing device applies a value (f|vk) obtained by concatenating a function (f) to the master verification key (mvk) and the verification key (vk) to the verification algorithm of the signature scheme to perform the parsing. The signature value (σ _vk ) for the verification key can be verified.

According to the disclosed embodiment, the function (f) of the function signature is set as a public key or a symmetric key, and the message (m) is signed with the signing key (sk _f ) for the function (f), and the function value ( f(m)) (that is, a value obtained by encrypting the message (m) with a function (f), which is a public key or a symmetric key) and a final signature value (σ), the message can be encrypted and signed at the same time. there will be

1 is a block diagram illustrating and describing a computing environment including a computing device suitable for use in example embodiments;
2 is a flowchart for explaining a method for processing a cryptographic signature according to an embodiment of the present invention.
3 is a flowchart illustrating a process of generating a signing key for a function in an embodiment disclosed herein;
4 is a flowchart illustrating a process of generating a function value and a final signature value for a message in an embodiment disclosed herein.
5 is a flowchart illustrating a process of verifying a function value and a final signature value for a message based on a master verification key in another computing device according to an embodiment.

Hereinafter, specific embodiments of the present invention will be described with reference to the drawings. The detailed descriptions that follow are provided to provide a comprehensive understanding of the methods, devices and/or systems described herein. However, this is only an example and the present invention is not limited thereto.

In describing the embodiments of the present invention, if it is determined that the detailed description of the known technology related to the present invention may unnecessarily obscure the subject matter of the present invention, the detailed description will be omitted. In addition, terms to be described later are terms defined in consideration of functions in the present invention, which may vary according to the intention or custom of a user or operator. Therefore, the definition should be made based on the contents throughout this specification. Terminology used in the detailed description is only for describing the embodiments of the present invention and should in no way be limiting. Unless expressly used otherwise, singular forms of expression include plural forms. In this description, expressions such as "comprising" or "comprising" are intended to indicate any characteristic, number, step, operation, element, portion or combination thereof, one or more other than those described. It should not be construed to exclude the existence or possibility of any other feature, number, step, operation, element, part or combination thereof.

In the following description, terms such as "transmission", "communication", "transmission", "reception" and other similar meanings of signals or information refer not only to direct transmission of signals or information from one component to another, but also to It also includes passing through other components. In particular, "transmitting" or "transmitting" a signal or information as a component indicates the final destination of the signal or information, and does not mean a direct destination. The same is true for "reception" of signals or information. Also, in this specification, two or more data or information being “related” means that when one data (or information) is obtained, at least a portion of other data (or information) can be obtained based thereon.

Also, terms such as first and second may be used to describe various components, but the components should not be limited by the terms. The terms may be used for the purpose of distinguishing one component from another. For example, a first element may be termed a second element, and similarly, a second element may be termed a first element, without departing from the scope of the present invention.

1 is a block diagram illustrating and illustrating a computing environment 10 including a computing device suitable for use in example embodiments. In the illustrated embodiment, each component may have different functions and capabilities other than those described below, and may include additional components other than those described below.

The illustrated computing environment 10 includes a computing device 12 . In one embodiment, computing device 12 may be a device for performing cryptographic signature processing in accordance with one embodiment of the present invention.

Computing device 12 includes at least one processor 14 , a computer readable storage medium 16 and a communication bus 18 . Processor 14 may cause computing device 12 to operate according to the above-mentioned example embodiments. For example, processor 14 may execute one or more programs stored on computer readable storage medium 16 . The one or more programs may include one or more computer-executable instructions, which when executed by processor 14 are configured to cause computing device 12 to perform operations in accordance with an illustrative embodiment. It can be.

Computer-readable storage medium 16 is configured to store computer-executable instructions or program code, program data, and/or other suitable form of information. Program 20 stored on computer readable storage medium 16 includes a set of instructions executable by processor 14 . In one embodiment, computer readable storage medium 16 includes memory (volatile memory such as random access memory, non-volatile memory, or a suitable combination thereof), one or more magnetic disk storage devices, optical disk storage devices, flash memory devices, other forms of storage media that can be accessed by computing device 12 and store desired information, or any suitable combination thereof.

Communications bus 18 interconnects various other components of computing device 12, including processor 14 and computer-readable storage medium 16.

Computing device 12 may also include one or more input/output interfaces 22 and one or more network communication interfaces 26 that provide interfaces for one or more input/output devices 24 . An input/output interface 22 and a network communication interface 26 are connected to the communication bus 18 . Input/output device 24 may be coupled to other components of computing device 12 via input/output interface 22 . Exemplary input/output devices 24 include a pointing device (such as a mouse or trackpad), a keyboard, a touch input device (such as a touchpad or touchscreen), a voice or sound input device, various types of sensor devices, and/or a photographing device. input devices, and/or output devices such as display devices, printers, speakers, and/or network cards. The exemplary input/output device 24 may be included inside the computing device 12 as a component constituting the computing device 12, or may be connected to the computing device 12 as a separate device distinct from the computing device 12. may be

2 is a flowchart illustrating a method 200 for processing an encryption signature according to an embodiment of the present invention. As described above, the cryptographic signature processing method 200 according to an embodiment of the present invention is a computing device 12 having one or more processors and a memory for storing one or more programs executed by the one or more processors. ) can be performed. To this end, the cryptographic signature processing method 200 may be implemented in the form of a program or software including one or more computer executable instructions and stored on the memory.

In addition, although the method is divided into a plurality of steps in the illustrated flowchart, at least some of the steps are performed in reverse order, combined with other steps, performed together, omitted, performed in detailed steps, or shown. One or more steps not yet performed may be added and performed.

In step 202, the computing device 12 establishes a master key pair using a signature scheme. Since the signature system is a known technology, a detailed description thereof will be omitted. Here, the master key pair may include a master signing key (msk) and a master verification key (mvk).

In an exemplary embodiment, computing device 12 may establish a pair of master signing key and master verification key using a setup algorithm of the signature scheme. At this time, the process of step 202 can be expressed by Equation 1 below.

(Equation 1)

(msk, mvk) ← Sig.Setup(1 ^k )

In step 204, the computing device 12 generates a signing key (sk _f ) for the function (f) based on the master signing key (msk) and the function (f) of the function signature.

Here, Functional Signature restricts the decryption authority of the secret key so that the person who has the secret key can access only specific function values of the ciphertext, not all information of the ciphertext, and functions for data It provides operation integrity function and is a kind of signature technique that can verify that the operation was performed using a legitimate function in the message.

In the disclosed embodiment, the function (f) of the function signature can be set as a public key or symmetric key for encryption. At this time, step 204 is a process of generating a signing key corresponding to the function f, which is a public key or a symmetric key. A detailed process of generating the signing key sk _f for the function f will be described later with reference to FIG. 3 .

3 is a flowchart illustrating a process of generating a signing key (sk _f ) for a function (f) in an embodiment disclosed herein.

In step 302, the computing device 12 establishes a new key pair (ie, a user's key pair) using a setup algorithm of a signature scheme. That is, the computing device 12 may set a new key pair using the setup algorithm of the signature scheme used when setting the pair of master signing key and master verification key.

Here, the new key pair may include a signing key (sk) and a verification key (vk). The process of step 302 can be expressed by Equation 2 below.

(Equation 2)

(sk, vk) ← Sig.Setup(1 ^k )

In step 304, the computing device 12 applies the signature algorithm of the signature scheme to the master signing key (msk), the function (f) of the function signature (Functional Signature), and the verification key (vk) to obtain a verification key. Calculate the signature value (σ _vk ) for

In an exemplary embodiment, the computing device 12 signs the value f|vk concatenated with the verification key vk to the function f with the master signing key msk to sign the verification key. A signature value (σ _vk ) for can be calculated. Here, function f can be used as a public key or a symmetric key. In this case, a value obtained by connecting the verification key (vk) to the public key or symmetric key may be signed with the master signing key (msk) to calculate the signature value (σ _vk ) for the verification key. The process of step 304 can be expressed by Equation 3 below.

(Equation 3)

σ _vk ← Sig. Sign(msk, f|vk)

In step 306, the computing device 12 generates the certificate c based on the function f of the function signature, the verification key vk, and the signature value σ _vk for the verification key. The process of step 306 can be expressed by Equation 4 below.

(Equation 4)

c = (f, vk, σ _vk )

In step 308 _, the computing device 12 generates a signing key (sk f ) for the function (f) based on the signing key (sk) and the certificate (c). The process of step 308 can be expressed by Equation 5 below.

(Equation 5)

sk _f = (sk, c)

Referring again to FIG. 2 , in step 206, computing device 12 determines a function for a message based on function f of the function signature, a signing key sk _f for function f, and a message m. A value (f(m)) (ie, a value obtained by encrypting the message (m) with a public key or a symmetric key function (f)) and a final signature value (σ) are generated.

Here, when the function f is a public key, a public key encryption method based on Rivest Shamir Adleman (RSA) may be used. In addition, when the function f is a symmetric key, a symmetric key encryption method based on AES (Advanced Encryption Standard Algorithm) may be used.

A detailed process of generating the function value f(m) and the final signature value σ for the message will be described later with reference to FIG. 4 . 4 is a flowchart illustrating a process of generating a function value (f(m)) and a final signature value (σ) for a message, in one disclosed embodiment.

In step 402, the computing device 12 calculates a signature value σ _m of the message by applying a signature algorithm of the signature system to the message m and the signing key sk. Here, the computing device 12 may parse the signing key sk _f for the function f into the signing key sk and the certificate c.

In an exemplary embodiment, the computing device 12 may sign the message m with the signing key sk to calculate the signature value σ _m for the message. The process of step 402 can be expressed by Equation 6 below.

(Equation 6)

σ _m ← Sig. Sign(sk, m)

At step 404, computing device 12 applies message m to function f to generate a function value f(m) for the message, and to message m, certificate c, and message The final signature value (σ) is generated based on the signature value (σ _m ) for Here, the final signature value σ can be expressed by Equation 7 below.

(Equation 7)

σ = (m, c, σ _m )

Referring back to FIG. 2 , at step 208 , computing device 12 transmits the function value f(m) and the final signature value σ for the message to another computing device 12 . Then, the other computing device 12 can verify the function value f(m) and the final signature value σ for the message based on the master verification key mvk.

A process of verifying the function value f(m) and the final signature value σ of the message by the other computing device 12 will be described later with reference to FIG. 5 . 5 is a flowchart illustrating a process of verifying a function value (f(m)) and a final signature value (σ) for a message based on a master verification key (mvk) in another computing device 12 according to an embodiment. .

In step 502, another computing device 12 parses the final signature value σ into message m, certificate c = (f, vk, σ _vk ), and signature value for message σ _m . The process of step 502 can be expressed by Equation 8 below.

(Equation 8)

σ = (m, c = (f, vk, σ _vk ), σ _m )

In step 504, the other computing device 12 applies the parsed message m to a function f to generate a function value f(m) for the message, and a function value f(m) for the generated message. m)) is matched with the function value f(m) of the message received from the computing device 12 to verify.

In step 506, the other computing device 12 verifies the signature value σ _m of the parsed message by applying the message m and the verification key vk to the verification algorithm of the signature scheme. The process of step 506 can be expressed by Equation 9 below. If the value of Equation 9 is 1, it is confirmed that the signature value (σ _m ) of the parsed message is valid.

(Equation 9)

Sig.Verify(vk, m, σ _m ) → 1

In step 508, the other computing device 12 applies the master verification key (mvk), the verification key (vk), and the function (f) to the verification algorithm of the signature scheme to obtain a signature value (σ _vk) for the parsed verification key. ) to verify. Specifically, the other computing device 12 applies the value (f|vk) obtained by concatenating the function (f) to the master verification key (mvk) and the verification key (vk) to the verification algorithm of the signature scheme to perform the parsing. The signature value (σ _vk ) for one verification key can be verified. The process of step 508 can be expressed by Equation 10 below. If the value of Equation 10 is 1, it is confirmed that the signature value (σ _vk ) for the parsed verification key is valid.

In the disclosed embodiment, digital signature algorithms (DSA), elliptic curve digital signature algorithms (ECDSA), Rivest Shamir Adleman (RSA), ElGamal, and the like may be used.

According to the disclosed embodiment, the function (f) of the function signature is set as a public key or a symmetric key, and the message (m) is signed with the signing key (sk _f ) for the function (f), and the function value ( f(m)) (that is, a value obtained by encrypting the message (m) with a function (f), which is a public key or a symmetric key) and a final signature value (σ), the message can be encrypted and signed at the same time. there will be

Although representative embodiments of the present invention have been described in detail above, those skilled in the art will understand that various modifications are possible to the above-described embodiments without departing from the scope of the present invention. . Therefore, the scope of the present invention should not be limited to the described embodiments and should not be defined, and should be defined by not only the claims to be described later, but also those equivalent to these claims.

10: Computing environment
12: computing device
14: Processor
16: computer readable storage medium
18: communication bus
20: program
22: input/output interface
24: input/output device
26: network communication interface

Claims (21)

one or more processors; and
A method performed in a computing device having a memory storing one or more programs executed by the one or more processors,
setting a pair of a master signing key (msk) and a master verification key (mvk) using a setup algorithm of a signature scheme;
generating a signing key (sk _f ) for the function (f) based on the master signing key (msk) and the function (f) of the functional signature; and
Based on the function f of the function signature, the signing key sk _f for the function f, and the message m, the function value f(m) for the message and the final signature value σ ),
The function (f) of the function signature is set as a public key or symmetric key for encryption,
The operation of generating a signing key (sk _f ) for the function (f), which is a public key or a symmetric key,
setting a pair of a signing key (sk) and a verification key (vk) using a setup algorithm of the signature scheme;
A signature value (σ vk ) of the verification key is obtained by applying the signature algorithm of the signature system to the master signing key (msk), the function (f) of the function signature, and the verification key ( _vk ). action to calculate;
generating a certificate (c) based on the function (f) of the function signature, the verification key (vk), and a signature value (σ _vk ) for the verification key; and
Generating a signing key (sk _f ) for the function (f) based on the signing key (sk) and the certificate (c),
The operation of generating the function value (f(m)) and the final signature value (σ) for the message uses a Rivest Shamir Adleman (RSA)-based public key encryption method when the function (f) is a public key, , When the function (f) is a symmetric key, a symmetric key encryption method based on AES (Advanced Encrytion Standard Algorithm) is used,
The operation of generating the function value (f(m)) and the final signature value (σ) for the message,
calculating a signature value (σ _m ) of the message by applying the signature algorithm of the signature scheme to the message (m) and the signing key (sk);
applying the message (m) to the function (f) to generate a function value (f(m)) for the message; and
and generating the final signature value (σ) based on the message (m), the certificate (c), and the signature value (σ _m ) for the message.
delete delete The method of claim 1,
The operation of calculating the signature value (σ _vk ) for the verification key,
Calculating a signature value (σ _vk ) for the verification key by signing a value (f|vk) obtained by concatenating the verification key (vk) to the function (f) with the master signing key (msk) , the signature encryption method.
delete The method of claim 1,
The operation of generating the function value (f(m)) and the final signature value (σ) for the message,
Further comprising parsing the signing key (sk _f ) for the function (f) into the signing key (sk) and the certificate (c).
The method of claim 1,
The signature encryption method,
Further comprising transmitting the function value (f(m)) and the final signature value (σ) for the message to another computing device,
The other computing device,
An operation of verifying the function value (f (m)) and the final signature value (σ) for the message based on the master verification key (mvk).
The method of claim 7,
The verification operation is
parsing the final signature value (σ) into the message (m), the certificate (c = (f, vk, σ _vk )), and the signature value (σ _m ) for the message;
generating a function value (f(m)) for the message by applying the parsed message (m) to the function (f); and
and checking whether the function value (f(m)) of the generated message matches the function value (f(m)) of the message received from the computing device.
The method of claim 8,
The verification operation is
and verifying a signature value (σ _m ) of the parsed message by applying the message (m) and the verification key (vk) to a verification algorithm of the signature scheme.
The method of claim 9,
The verification operation is
The signature value for the verification key parsed by applying the value (f|vk) obtained by concatenating the function (f) to the master verification key (mvk) and the verification key (vk) to the verification algorithm of the signature scheme. The signature encryption method further comprising verifying (σ _vk ).
one or more processors;
Memory; and
contains one or more programs;
the one or more programs are stored in the memory and configured to be executed by the one or more processors;
The one or more programs,
instructions for setting up a pair of master signing key (msk) and master verification key (mvk) using a setup algorithm of a signature scheme;
a command for generating a signing key (sk _f ) for the function (f) based on the master signing key (msk) and the function (f) of the functional signature; and
Based on the function f of the function signature, the signing key sk _f for the function f, and the message m, the function value f(m) for the message and the final signature value σ ), and
The function (f) of the function signature is set as a public key or symmetric key for encryption,
The command for generating a signing key (sk _f ) for the function (f), which is a public key or a symmetric key,
a command for setting a pair of a signing key (sk) and a verification key (vk) using a setup algorithm of the signature scheme;
A signature value (σ vk ) of the verification key is obtained by applying the signature algorithm of the signature system to the master signing key (msk), the function (f) of the function signature, and the verification key ( _vk ). command to calculate;
an instruction for generating a certificate (c) based on the function (f) of the function signature, the verification key (vk), and a signature value (σ _vk ) for the verification key; and
A command for generating a signing key (sk _f ) for the function (f) based on the signing key (sk) and the certificate (c),
The generation of the function value (f (m)) and the final signature value (σ) for the message uses a public key encryption method based on RSA (Rivest Shamir Adleman) when the function (f) is a public key, and the When function (f) is a symmetric key, AES (Advanced Encryption Standard Algorithm)-based symmetric key encryption is used.
The command for generating the function value (f(m)) and the final signature value (σ) for the message is
a command for calculating a signature value (σ _m ) for the message by applying the signature algorithm of the signature scheme to the message (m) and the signing key (sk);
instructions for applying the message (m) to the function (f) to produce a function value (f(m)) for the message; and
and instructions for generating the final signature value (σ) based on the message (m), the certificate (c), and the signature value (σ _m ) for the message.
delete delete The method of claim 11,
The command for calculating the signature value (σ _vk ) for the verification key is,
Calculating a signature value (σ _vk ) for the verification key by signing a value (f|vk) obtained by concatenating the verification key (vk) to the function (f) with the master signing key (msk) , computing device.
delete The method of claim 11,
The command for generating the function value (f(m)) and the final signature value (σ) for the message is
The computing device further comprises a command for parsing the signing key (sk _f ) for the function (f) into the signing key (sk) and the certificate (c).
The method of claim 11,
The one or more programs,
Further comprising instructions for transmitting the function value (f(m)) and the final signature value (σ) for the message to another computing device,
The other computing device,
Verification of the function value (f (m)) and the final signature value (σ) for the message based on the master verification key (mvk).
The method of claim 17
The other computing device,
The final signature value (σ) is parsed into the message (m), the certificate (c = (f, vk, σ _vk )), and the signature value (σ _m ) for the message, and the parsed message (m ) is applied to the function f to generate a function value f(m) for the message, and the function value f(m) for the generated message corresponds to a value for the message received from the computing device. A computing device that checks whether it matches the function value f(m).
The method of claim 18
The other computing device,
A computing device that verifies a signature value (σ _m ) of the parsed message by applying the message (m) and the verification key (vk) to a verification algorithm of the signature scheme.
The method of claim 19
The other computing device,
The signature value for the verification key parsed by applying the value (f|vk) obtained by concatenating the function (f) to the master verification key (mvk) and the verification key (vk) to the verification algorithm of the signature scheme. A computing device that verifies (σ _vk ).
A computer program stored in a non-transitory computer readable storage medium,
The computer program includes one or more instructions, which, when executed by a computing device having one or more processors, cause the computing device to:
setting a pair of a master signing key (msk) and a master verification key (mvk) using a setup algorithm of a signature scheme;
generating a signing key (sk _f ) for the function (f) based on the master signing key (msk) and the function (f) of the functional signature; and
Based on the function f of the function signature, the signing key sk _f for the function f, and the message m, the function value f(m) for the message and the final signature value σ ) to perform an operation that generates
The function (f) of the function signature is set as a public key or symmetric key for encryption,
The operation of generating a signing key (sk _f ) for the function (f), which is a public key or a symmetric key,
setting a pair of a signing key (sk) and a verification key (vk) using a setup algorithm of the signature scheme;
A signature value (σ vk ) of the verification key is obtained by applying the signature algorithm of the signature system to the master signing key (msk), the function (f) of the function signature, and the verification key ( _vk ). action to calculate;
generating a certificate (c) based on the function (f) of the function signature, the verification key (vk), and a signature value (σ _vk ) for the verification key; and
Generating a signing key (sk _f ) for the function (f) based on the signing key (sk) and the certificate (c),
The operation of generating the function value (f(m)) and the final signature value (σ) for the message uses a Rivest Shamir Adleman (RSA)-based public key encryption method when the function (f) is a public key, , When the function (f) is a symmetric key, a symmetric key encryption method based on AES (Advanced Encrytion Standard Algorithm) is used,
The operation of generating the function value (f(m)) and the final signature value (σ) for the message,
calculating a signature value (σ _m ) of the message by applying the signature algorithm of the signature scheme to the message (m) and the signing key (sk);
applying the message (m) to the function (f) to generate a function value (f(m)) for the message; and
And generating the final signature value (σ) based on the message (m), the certificate (c), and the signature value (σ _m ) for the message.

Images