TW201737152A - Digital signature verification system validating signature between customer C1 and customer C2 - Google Patents

Abstract

The invention provides a digital signature verification system. The system is used for validating signature between customer C1 and customer C2. Arbiter of system receives signature generated by performing encryption of message h through signature key used by customer C1. Authentication center of the system acquires signature from arbiter, and uses signature key to perform encryption for signature to acquire message h. Random key is used for generating random authentication message h MAC. Encryption of random key is performed by using encryption key of arbiter for generating encryption information R. Arbiter acquires random authentication message h MAC and encryption information R, and performs decryption for acquiring random key. Furthermore, arbiter uses message h to generate message verification code h MAC'. Finally, arbiter compares h MAC' and h MAC for verifying accuracy of signature.

Description

Electronic signature verification system

The invention relates to an electronic signature verification system, in particular to an electronic signature verification system for signature verification by means of an arbitrator or a certification center.

In order to improve the security of the communication and the non-repudiation of the message, the current communication encryption mechanism will send a verification signature to the transmission message when the data is transmitted, and the receiver can verify the message after receiving the message. The signature is correct to determine if the received message was sent by the sender.

Therefore, when a malicious third party wants to send a malicious message, it will try to falsify the sender's signature and send a message with a forged signature to the recipient to achieve the purpose of deception.

In order to solve the above problems, the prior art further proposes a technical solution for judging the correctness of the signature by the arbitrator. The scheme allows the transmitting parties to deliver the signature encryption and decryption key to the arbitrator, and when both parties have the certification requirements, the signature will be handed over to the arbitrator for verification. However, in this scheme, since the arbitrator holds the signature key that can be encrypted and decrypted, when the arbitrator is hacked, or the internal smart data is improperly used, the security of the overall communication will be seriously jeopardized.

In summary, how to provide a technical solution that can improve the security of the signature is a technical problem that needs to be solved in the field.

In order to solve the problems disclosed above, it is an object of the present invention to provide an electronic signature verification system that can be verified for signatures.

To achieve the above object, the present invention provides an electronic signature verification system. The foregoing system is used to verify the signature between the first client C ₁ and the second client C ₂ . This system includes an arbiter and a certificate authority. The aforementioned arbitrator receives the signature from the first client , the aforementioned signature Is the signature key used by the first client C ₁ The first message h is encrypted. The aforementioned authentication center end communication is connected to the arbiter to obtain the signature And use the signature key Signature Decrypt to get the first message h, and use the random key Generate random authentication message h ^MAC and use the arbitrator's encryption key Random key Encryption is performed to generate an encrypted information R. When the arbiter obtains the random authentication message h ^MAC and the encrypted information R, and decrypts it to obtain a random key. The arbitrator uses a random key And the first message h to generate a message verification code h ^{MAC '} . In addition, the arbiter side compares the message verification code h ^{MAC '} and the random verification message h ^MAC to provide a signature judgment result.

For the above purposes, the present invention further provides an electronic signature verification system that is not verified by an arbiter, and the foregoing electronic signature verification system is used to verify the relationship between the first client C ₁ and the second client C ₂ Signature SIG _S , the aforementioned signature SIG _S is used by the first client C _{1 to} use the signature key The first message h is encrypted, and the electronic signature verification system includes an authentication center. The foregoing authentication center receives the random virtual identification information PID _S from the second client C ₂ , the random virtual identification information PID _{R of the} signature receiving end, and the signature SIG _S , and the authentication center further uses the PID. _S of the signature key for decryption to obtain the signature Sig _S In addition, the authentication center further generates the session key SK _R and calculates And calculated by the encryption key of PID _R , and send the message R _R and the message Give the second client C ₂ . After the second client C ₂ receives the information from the authentication center, the encryption key is used. Decrypt R _R to get And calculate the message h _R ' =H(M||PID _S ||PID _R ||RID _S ||T), and calculate the message And compare as well as When the comparison result is met, to confirm the end of the message from the first client of C _1.

In summary, when the client is communicating, the correctness of the signature can be verified by the assistance of the arbiter or the certification center. Compared with the conventional signature verification scheme, the present invention can effectively improve the overall The security of communication.

1‧‧‧Certification Center

2‧‧‧ Arbitrator

3‧‧‧Client

31‧‧‧ signature end

32‧‧‧Signature Receiver

1 is a schematic diagram of a system of an electronic signature verification system of the present invention.

2 is a schematic flow chart of the signature phase of the electronic signature verification system of the present invention.

FIG. 3 is a schematic flow chart of the verification phase of the electronic signature verification system of the present invention.

4 is a schematic flow chart of the confirmation phase of the electronic signature verification system of the present invention.

FIG. 5 is a verification flow chart of the electronic signature verification system of the present invention which is not verified by the arbiter.

The specific embodiments are described below to illustrate the embodiments of the invention, but are not intended to limit the scope of the invention.

Please refer to FIG. 1 , which is a schematic diagram of a system of an electronic signature verification system according to the present invention. The system includes a certification center end 1, an arbiter end 2, and a plurality of clients 3 (hereinafter referred to as the signature end and the signature receiving end). Each client 3 and arbitrator 2 will register with the authentication center 1 and obtain the corresponding virtual identification information PID _U and signature key. And encryption keys . In addition, each client 3 can register the real identity information RID _U and the corresponding virtual identity information PID _U to the arbiter 2 to facilitate the identification of the arbiter 2 .

The aforementioned certification center end 1 acquires the trust of other parties and assists the parties in the authentication operation during communication. The arbiter 2 mentioned above assists in receiving the signature to confirm the correctness of the signature and to record the information at the time of verification. The foregoing client 3 can respectively sign the signature end 31 and the signature receiving end 32, and the signature end 31 can use the signature key to sign the message to generate the signature, and the signature receiving end 32 receives the signature. The arbitrator 2 can be requested to verify the signature.

To further illustrate the electronic signature verification system of the present invention, the various symbols are defined as shown in Table 1:

In the present invention, when the signature end wants to send the signature to the signature receiving end, and the signature receiving end wants to verify the signature, the signature can be transmitted to the arbiter 2 for verification, or by the certification center. End 1's assistance to self-verify. The invention divides the verification process into a signature phase, a verification phase, and an validation phase. The stages are explained as follows:

Signature stage

Please refer to the description of FIG. 2 , which is a schematic flowchart of the signing stage of the present invention, and the steps are as follows:

S101: The signature end 31 (first client) calculates a message h=H(M||PID _S ||PID _R ||RID _S ||T), and generates a signature .

S102: The signature end 31 transmits PID _S , PID _R , Sig _S , M, and T to the signature receiving end 32 (second client).

Verification phase

Please refer to the description of FIG. 3. In this stage, when the signature receiving end 32 wants to verify the signature, the following two schemes can be selected for verification:

Solution (1): Online/offline verification is performed by the arbiter 2, where online/offline verification refers to whether the connection between the arbiter 2 and the signature end 31 is verified via a connection. When the offline verification scheme is used, the signature receiving end 32 transmits the received PID _S , PID _R , Sig _S , M , and T to the arbiter 2, and the arbiter 2 requests the authentication center 1 to assist. If the online verification scheme is adopted, in the foregoing step S102, the signature end 31 will directly transmit the PID _S , PID _R , Sig _S , M, and T to the arbiter 2, and let the arbiter 2 Request authentication assistance from the certification center end 1.

Scheme (2): Verification is not performed by the arbiter 2 . Some applications require quick verification. Therefore, in the scheme (2), the signature receiving end 32 can authenticate the signature through the assistance of the authentication center end 1.

The steps of the verification phase of the scheme (1) are as follows:

S201: In the case of offline verification, after the arbitrator 2 receives the request of the signature receiving end 32, the arbitrator 2 transmits the PID _S , the PID _A , and the Sig _S to the authentication center end 1. On the other hand, in the case of online verification, after the arbitrator 2 receives the request of the signature 31, the arbitrator 2 transmits the PID _S , PID _A , and Sig _S to the authentication center terminal 1.

S202: The authentication center end 1 uses the signature key of the PID _S (for example: ) Decrypt the signature Sig _S to get the first message . Next, the authentication center 1 generates a session key SK _A and calculates a random verification message. . Next, the authentication center end 1 uses the encryption key of PID _A (for example: Calculation And R _A and Transfer to the arbiter terminal 2.

S203: After receiving the message of the authentication center end 1, the arbitrator 2 uses the encryption key. Decrypting R _A to obtain SK _A ' , then, the arbiter 2 calculates h ' = H(M||PID _S ||PID _{R by} receiving the message (for example: PID _S , PID _R , M, T) ||RID _S ||T), the aforementioned RID _S has been registered with the arbiter 2 at the registration stage. Then, the arbiter end 2 calculates And compare as well as . When the comparison result is met, the verification parameter r=1 is set; if not, the verification parameter r=0 is set.

S204: Arbitrator end 2 calculates h _A = H(r||Sig _S ||M||T||PID _S ||PID _R ||PID _A ), and generates a signature .

S205: The arbiter terminal 2 transmits the verification parameter r and the Sig _A to the signature receiving end 32.

The steps of the confirmation phase of the scheme (1) are as follows: Please refer to the description of FIG. 4, in this stage, the signature receiving end 32 can know the signature Sig _{S of the} signature end 31 and the sign of the arbiter end 2 through the verification parameter r. Chapter Sig _A verification results. The steps are explained as follows:

S301: The signature receiving end 32 transmits PID _A , PID _R , and Sig _A to the authentication center end 1.

S302: Similar to S202, the authentication center end 1 is authenticated by the PID _A (for example: ) Decrypt the signature Sig _A to get the message . Next, the authentication center end 1 generates a session key SK _R and calculates . Next, the authentication center end 1 uses the encryption key of the PID _R (for example: Calculation .

S303: The authentication center end 1 transmits R _R and To the signature receiving end 32.

S304: After the signature receiving end 32 receives the information from the authentication center end 1, the signature receiving end 32 uses the encryption key. Decrypt R _R to get . Next, the signature receiving end 32 calculates the message h _R ' = H(r||Sig _S ||M||T||PID _S ||PID _R ||PID _A ). Furthermore, the signature receiving end 32 calculates the message. . Finally, compare as well as When the comparison result is met, it can be confirmed as the message from the arbiter end 2.

Please refer to FIG. 5, which is a verification flowchart of the scheme (2), and the verification steps are as follows:

S401: The signature receiving end 32 (the second client) transmits the signature virtual random identification information PID _S , the signature receiving end random virtual identification information PID _R , and the SIG _S to the authentication center end 1 .

S402: Similar to S202, the authentication center end 1 is authenticated by the PID _S (for example: ) Decrypt the signature Sig _S to get the message . Next, the authentication center 1 generates the session key SK _R and calculates a message. . Next, the authentication center end 1 uses the encryption key of PID _R (for example: ) calculation message .

S403: The authentication center end 1 transmits R _R and Give the signature receiver 32.

S404: After the signature receiving end 32 receives the information from the authentication center end 1, the signature receiving end 32 uses the encryption key. Decrypt R _R to get . Next, the signature receiving end 32 calculates the message h _R ' = H(M||PID _S || PID _R || RID _S || T ). Furthermore, the signature receiving end 32 calculates the message. . Finally, compare as well as When the comparison result is met, it can be confirmed as the message from the signature end 31 (first client).

The foregoing client 3, the arbiter 2, and the authentication center 1 can run one or more connected computer devices, and the operations performed can be performed by ASP, C/C++/C#, JAVA, Python, PHP, It is implemented in a programming language such as Perl, except for the category of its programming language.

The detailed description of the preferred embodiments of the present invention is intended to be limited to the scope of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

1‧‧‧Certification Center

2‧‧‧ Arbitrator

3‧‧‧Client

Claims (7)

An electronic signature verification system for verifying the signature between the first client C ₁ and the second client C ₂ , comprising: an arbiter, comprising: receiving the signature from the first client Where the signature Using the signature key by the first client C ₁ Encrypting the first message h; the authentication center is connected to the arbiter to obtain the signature , contains: use the signature key The signature Decrypt to obtain the first message h; use a random key Generate a random verification message h ^MAC and use the arbitrator's encryption key The random key Encrypting to generate an encrypted information R; wherein the arbiter obtains the random authentication message h ^MAC and the encrypted information R, and decrypts to obtain the random key The arbitrator uses the random key more And the first message h is used to generate a message verification code h ^{MAC '} ; wherein the arbiter end compares the message verification code h ^{MAC '} and the random verification message h ^MAC to provide a signature judgment result. The requested item of electronic signature verification system of claim 1, wherein the first message M h needs to be signed based on the message, the first client terminal C of the first _pseudo random identification information PID _C1, the second client The second random virtual identification information PID _{C2 of} C ₂ and the real identification information of the first client Or the time stamp information T is generated by hash processing. The electronic signature verification system according to claim 2, wherein the arbitrator determines that the signature determination result is successful, and then calculates h _A =H(r||Sig _S ||M||T||PID _S ||PID _R ||PID _A ) and generate a signature Then, the arbiter transmits the signature judgment result and Sig _A to the second client C ₂ . The electronic signature verification system of claim 3, wherein the authentication center transmits R _R and Up to the second client C ₂ , the second client C ₂ by the encryption key Decrypt R _R to get Next, the second client C ₂ calculates a message h _R '=H(r||Sig _S ||M||T||PID _S ||PID _R ||PID _A ), the second client C ₂ Calculation message And compare as well as When the comparison result is met, it can be confirmed as the message from the arbiter. The electronic signature verification system of claim 1, wherein the signature is between the first client and the arbitrator. It is transmitted by the first client to the arbiter. The electronic signature verification system of claim 1, wherein the signature is when the first client and the arbitrator are offline. The first client transmits to the arbiter via the second client. An electronic signature verification system for verifying a signature SIG _S between a first client C ₁ and a second client C ₂ , wherein the signature SIG _S is used by the first client C _{1 to} use a signature key The first message h is encrypted. The electronic signature verification system includes: an authentication center end, receiving a random virtual identification information PID _S from the second client C _{2, and a} random virtual identification of the signature receiving end. The information PID _R and the signature SIG _S , the certification center decrypts the signature Sig _S by the signature key of the PID _S to obtain h _S = The authentication center further generates a session key SK _R and calculates And calculated by the encryption key of PID _R , and send the message R _R and the message Giving the second client C ₂ ; wherein the second client C ₂ receives the information from the self-certification center, by using the encryption key Decrypt R _R to get And calculate the message h _R ' =H(M||PID _S || PID _R || RID _S || T ), and calculate the message And compare as well as When the comparison result is met, to confirm the end of the message from the first client C of _1.