WO2020237879A1

WO2020237879A1 - Method and apparatus for revoking group-signed digital certificate, storage medium, and electronic device

Info

Publication number: WO2020237879A1
Application number: PCT/CN2019/103431
Authority: WO
Inventors: 何伟林
Original assignee: 平安科技（深圳）有限公司
Priority date: 2019-05-27
Filing date: 2019-08-29
Publication date: 2020-12-03
Also published as: CN110351090A; CN110351090B

Abstract

The present application relates to the technical field of computers, and in particular to a method and an apparatus for revoking a group-signed digital certificate, a storage medium, and an electronic device. The method comprises: acquiring, in response to a request for revoking a target group-signed digital certificate, a target random number corresponding to the target group-signed digital certificate; performing a first hash operation on the target random number to acquire a target digest; group-signing the target digest by running a group signature algorithm by means of a private key of a group member revoking the target group-signed digital certificate, so as to acquire a revocation group signature for revoking the target group-signed digital certificate; and publishing the target random number and the revocation group signature to revoke the target group-signed digital certificate. The present application provides a method for revoking a target group-signed digital certificate, and in the method, a group member of the revoked target group-signed digital certificate is hidden. In addition, the method is simple, and is easy to implement.

Description

Group signature digital certificate revocation method and device, storage medium and electronic equipment

Technical field

This application claims the priority of the Chinese patent application 201910447511.0 filed on May 27, 2019 with the title of "Group Signature Digital Certificate Revocation Method and Device, Storage Media, and Electronic Equipment", and the entire contents of which are incorporated herein by reference. .

This application relates to the field of computer technology, in particular to a method and device for revocation of a group signature digital certificate.

Background technique

With the continuous development of electronic technology and network technology, people are becoming more and more dependent on the network. In particular, communication technology has become an indispensable part of people’s lives. Network and information security have also become increasingly affected by the development of technology. Widespread concern. In the group signature system, group members form a group, and each group member has a different private key, which corresponds to the only group public key in the group. Any group member in the group can issue a group signature digital certificate on behalf of the group, and the verifier can use the group public key to verify the group signature digital certificate, but the identity of the group member issuing the group signature digital certificate cannot be determined.

technical problem

The inventor of the present application realizes that since the group signature digital certificate hides the group member who issued the group signature digital certificate, it cannot be revoked by traditional verification of the signature of the group member who issued the group signature digital certificate.

In summary, providing a method for anonymously revoking group signature digital certificates has become an urgent problem to be solved.

It should be noted that the information disclosed in the above background section is only used to strengthen the understanding of the background of the present disclosure, and therefore may include information that does not constitute the prior art known to those of ordinary skill in the art.

Technical solutions

In order to solve the above technical problems, an object of this application is to provide a method and device for revocation of a group signature digital certificate.

Among them, the technical solutions adopted in this application are:

On the one hand, a group signature digital certificate revocation method, applied to a blockchain, includes: responding to a target group signature digital certificate revocation request, obtaining a target random number corresponding to the target group signature digital certificate; The first hash operation to obtain the target digest; the group signature algorithm is run by revoking the private key of the group member of the target group signature digital certificate to group the target digest to obtain the target group signature digital certificate revoked Revocation of the group signature; publishing the target random number and the revocation group signature to revoke the target group signature digital certificate.

On the other hand, a group signature digital certificate revocation device, applied to a blockchain, includes: a first obtaining module, configured to respond to a target group signature digital certificate revocation request, and obtain a target random number corresponding to the target group signature digital certificate The first operation module is used to perform the first hash operation on the target random number to obtain the target digest; the signature module is used to run the group signature algorithm by revoking the private key of the group member of the target group signature digital certificate Perform a group signature on the target summary to obtain a revocation group signature that revokes the target group signature digital certificate; a publishing revocation module is used to publish the target random number and the revocation group signature to revoke the target Group signature digital certificate.

In another aspect, an electronic device includes: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute any one of the above by executing the executable instructions The group signature digital certificate revocation method described in item.

On the other hand, a computer-readable storage medium has a computer program stored thereon, and when the computer program is executed by a processor, it implements the group signature digital certificate revocation method described in any one of the above.

Beneficial effect

In the above technical solution, the first hash operation is performed on the target random number corresponding to the target group signature digital certificate to obtain the target digest, and the group signature algorithm pair is run by revoking the private key of the group member of the target group signature digital certificate The target digest is group-signed to obtain the revocation group signature, and the revocation group signature and the target random number are announced to realize the revocation of the target group's signature digital certificate. Since the group signature algorithm is executed by revoking the private key of the group member of the target group signature digital certificate, the target digest generated by the target random number corresponding to the target group signature digital certificate is group-signed to obtain the revoked group signature, and the target group signature is realized The anonymous revocation of the digital certificate provides a method for revocation of the target group signature digital certificate that hides the group members who revoke the target group signature digital certificate, and the method is simple and easy to implement.

It should be understood that the above general description and the following detailed description are only exemplary and explanatory, and cannot limit the application.

Description of the drawings

The drawings herein are incorporated into the specification and constitute a part of the specification, show embodiments that conform to the application, and are used together with the specification to explain the principle of the application.

FIG. 1 is a flowchart of a method for revocation of a group signature digital certificate provided in an exemplary embodiment of the present disclosure;

FIG. 2 is a flowchart of generating a target group signature digital certificate provided in an exemplary embodiment of the present disclosure;

FIG. 3 is the first flowchart of verifying the legality of the revocation of the digital certificate signed by the target group provided in an exemplary embodiment of the present disclosure;

4 is a second flowchart of verifying the legality of the revocation of a digital certificate signed by a target group provided in an exemplary embodiment of the present disclosure;

Fig. 5 is a block diagram of a group signature digital certificate revocation device provided in an exemplary embodiment of the present disclosure;

FIG. 6 is a schematic diagram of modules of an electronic device in an exemplary embodiment of the present disclosure;

Fig. 7 is a schematic diagram of a program product in an exemplary embodiment of the present disclosure.

Through the above drawings, the specific embodiments of the application have been shown, and there will be more detailed descriptions in the following. These drawings and text descriptions are not intended to limit the scope of the concept of the application in any way, but by referring to specific embodiments. The concept of this application is explained to those skilled in the art.

Embodiments of the invention

Here, an exemplary embodiment will be described in detail, and examples thereof are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings indicate the same or similar elements. The implementation manners described in the following exemplary embodiments do not represent all implementation manners consistent with the present application. On the contrary, they are only examples of devices and methods consistent with some aspects of the application as detailed in the appended claims.

Example embodiments will now be described more fully with reference to the accompanying drawings. However, the example embodiments can be implemented in various forms, and should not be construed as being limited to the examples set forth herein; on the contrary, the provision of these embodiments makes the present disclosure more comprehensive and complete, and fully conveys the concept of the example embodiments To those skilled in the art. The described features, structures or characteristics may be combined in one or more embodiments in any suitable way.

The exemplary embodiments of the present disclosure first provide a method for text emotion recognition, where text generally refers to information in text form. In this embodiment, voice information can also be converted into text by a specific tool for emotion recognition; emotion recognition can be The classification and judgment of the emotional state conveyed by the text, such as whether the text emotion is positive or negative, commendatory or derogatory, etc.

This exemplary embodiment first discloses a method for revocation of a group signature digital certificate, which is applied to a blockchain, and the blockchain can be deployed in multiple servers. As shown in FIG. 1, the method for revocation of a group signature digital certificate is It can include the following steps:

Step S110: In response to the target group signature digital certificate revocation request, obtain the target random number corresponding to the target group signature digital certificate;

Step S120: Perform a first hash operation on the target random number to obtain a target summary;

Step S130: Run a group signature algorithm to group the target digest by revoking the private key of the group member of the target group signature digital certificate, so as to obtain a revoked group signature that revokes the target group signature digital certificate;

Step S140: Publish the target random number and the revocation group signature to revoke the target group signature digital certificate.

According to the group signature digital certificate revocation method in this exemplary embodiment, since the group signature algorithm is executed by revoking the private key of the group member of the target group signature digital certificate, the target digest generated by the target random number corresponding to the target group signature digital certificate Perform group signature to obtain the revoked group signature, realize the anonymous revocation of the target group signature digital certificate, and provide a method for the target group signature digital certificate revocation that hides the group members who revoke the target group signature digital certificate, and the method is simple and easy to implement .

Hereinafter, referring to FIG. 1, the method for revoking the group signature digital certificate in this exemplary embodiment will be further explained.

In step S110, in response to the target group signature digital certificate revocation request, a target random number corresponding to the target group signature digital certificate is obtained.

In the embodiment of the present application, first, the process of generating the target group signature digital certificate is described according to FIG. 2. As shown in FIG. 2, the process of generating the target group signature digital certificate may include the following steps:

Step S210: In response to the target group signature digital certificate generation request, a group signature digital certificate is generated.

In the embodiment of this application, the blockchain calls the smart contract to run the group construction algorithm to generate the group public key and the group administrator's private key. Each group member obtains his own private key by registering with the group administrator. When a group of members issue the target group signature digital certificate to the user, the blockchain generates the group signature digital certificate through the group member's CA (e-commerce certification authority).

Step S220: Obtain the target random number, and perform a second hash operation on the target random number to obtain identification information.

In the embodiment of the present application, the blockchain obtains a target random number, and the specific content of the target random number can be set by oneself, which is not particularly limited in this exemplary embodiment. The specific type of the second hash operation can be set by the developer himself, which is not specifically limited in this exemplary embodiment. For example, the second hash operation may be SHA256 or SM3, which is not particularly limited in this exemplary embodiment. The data obtained after the second hash operation is performed on the target random number is determined as identification information.

Step S230: Generate the target group signature digital certificate according to the identification information and the group signature digital certificate.

In this embodiment of the application, the identification information may be stored in the extended field of the group signature digital certificate to generate the target group signature digital certificate. It is also possible to mark the group signature digital certificate through the identification information, and determine the marked group signature digital certificate as the target group signature digital certificate. It should be noted that after the target group signature digital certificate is generated, the target group signature digital certificate is associated with the target random number and then published.

Based on this, when the block link receives the target group signature digital certificate revocation request, it responds to the target group signature digital certificate revocation request, and obtains the published target random number corresponding to the target group signature digital certificate.

In step S120, a first hash operation is performed on the target random number to obtain a target digest.

In the embodiment of the present application, the specific type of the first hash operation can be set by itself, which is not particularly limited in this exemplary embodiment. The data obtained after the first hash operation on the target random number is determined as the target digest.

In step S130, run a group signature algorithm to group the target digest by revoking the private key of the group member of the target group signature digital certificate to obtain a revoked group signature that revokes the target group signature digital certificate.

In this embodiment of the application, the private key of the group member who revokes the target group signature digital certificate is obtained, and the group signature algorithm is invoked and run through the private key to sign the target digest to obtain the revoked group of the target group signature digital certificate. signature.

It is worth noting that the group signature algorithm is executed through the private key of the group member to obtain the group signature, which is not the group member's own signature. The private key of each group member is different. The group member just calls the group signature algorithm according to their private key. The final signature is not the group member's own signature, but the signature of all group members, that is, the group signature. The group signature can be decrypted with the group public key, and the identity of the group member who runs the group signature algorithm through the private key to perform the revocation can be hidden.

In step S140, the target random number and the revocation group signature are published to revoke the target group signature digital certificate. In this embodiment of the application, the target random number and the revocation group signature are associated and then published to complete the revocation of the target group signature digital certificate.

Further, in order to verify the legality of the revocation of the digital certificate signed by the target group, as shown in FIG. 3, the method may further include:

Step S310: In response to the legality verification request for the revocation of the target group signature digital certificate, obtain the published revocation group signature and the target random number. In this embodiment of the application, the published target random number is the target random number associated with the revocation group signature.

Step S320: Verify the revocation group signature through the group public key, the revocation group signature, and the published target random number.

In the embodiment of this application, first, the revocation group signature is decrypted by the group public key to obtain the target digest, and then the first hash operation is performed on the published target random number to obtain The digest to be compared, and finally, the target digest is matched with the digest to be compared; if it matches, it is determined that the revocation group signature has passed verification; if it does not match, it is determined that the revocation group signature has not passed verification.

Step S330: If the revocation group signature verification is passed, perform the second hash operation on the published target random number to obtain the identification information to be compared. In the embodiment of the present application, if the revocation group signature verification is passed, a second hash operation is performed on the published target random number, and the obtained result is determined as the identification information to be compared.

Step S340: Determine whether the identification information in the target group signature digital certificate is the same as the identification information to be compared. In this embodiment of the application, the identification information in the target group signature digital certificate is matched with the identification information to be compared, and based on the matching result, it is determined whether the identification information in the target group signature digital certificate is the same as the identification information to be compared. The identification information in the target group signature digital certificate matches the identification information to be compared, then the identification information in the target group signature digital certificate is the same as the identification information to be compared. If the identification information in the target group signature digital certificate matches the identification information to be compared If the information does not match, the identification information in the target group signature digital certificate is different from the identification information to be compared.

In step S350, if they are the same, it is determined that the revocation of the target group signature digital certificate is legal. In this embodiment of the application, if the identification information in the group signature digital certificate is the same as the identification information to be compared, it is determined that the revocation of the target group signature digital certificate is legal.

It can be seen from the above that in the process of verifying the legality of the revocation of the digital certificate of the target group signature, the group public key is used to verify the revocation group signature, and the second hash operation is performed on the published target random number to obtain The identification information to be compared, and the verification of the validity of the revocation of the signature digital certificate of the target group based on the identification information to be compared and the identification information in the signature digital certificate of the target group are implemented to verify the validity of the revocation of the signature digital certificate of the target group On this basis, the group members who revoke the signature digital certificate of the target group are also hidden, that is, the verification group members cannot verify the group members who revoke the signature digital certificate of the target group during the verification process.

Further, in order to ensure the security and legitimacy of the revocation operation of the target group signature digital certificate, the obtaining the target random number and performing a second hash operation on the target random number to obtain identification information may include: Obtain the target random number, and perform a first sub-hash operation on the target random number to obtain first identification information; perform a second sub-hash operation on the target random number to obtain second identification information. It should be noted that the type of the first sub-hash operation and the second sub-hash operation are different. Based on this, the generating the target group signature digital certificate according to the identification information and the group signature digital certificate may include: generating according to the first identification information, the second identification information, and the group signature digital certificate The target group signs a digital certificate. In the embodiment of the present application, the first identification information and the second identification information may be stored in the extended field of the group signature digital certificate to generate the target group signature digital certificate. It is also possible to mark the group signature digital certificate through the first identification information and the second identification information, and determine the marked group signature digital certificate as the target group signature digital certificate. It should be noted that after the target group signature digital certificate is generated, the target group signature digital certificate is associated with the target random number and then published.

It can be seen from the above that the first hash operation and the second hash operation are respectively performed on the target random number to obtain the first identification information and the second identification information, and according to the first identification information, the second identification information and the group signature digital The digital certificate in front of the certificate generation target group uses two different hash calculations, which greatly increases the difficulty of deciphering the first identification information and the second identification information, thereby ensuring the safety and security of the revocation operation of the target group’s signature digital certificate. legality.

Based on this, as shown in Figure 4, the process of verifying the legality of the revocation of the digital certificate signed by the target group may include the following steps:

Step S410: In response to the legality verification request for the revocation of the target group signature digital certificate, obtain the published revocation group signature and the target random number. Since this step has been explained above, it will not be repeated here.

Step S420: Verify the revocation group signature through the group public key, the revocation group signature, and the published target random number. Since this step has been explained above, it will not be repeated here.

Step S430: If the revocation group signature verification is passed, perform the first sub-hash operation on the published target random number to obtain the first identification information to be compared, and compare the published target random number Perform the second sub-hash operation to obtain the second identification information to be compared. The first sub-hash operation and the second sub-hash operation have different types.

Step S440: Determine whether the first identification information in the target group signature digital certificate is the same as the first identification information to be compared, and whether the second identification information in the target group signature digital certificate is the same as the second identification information. The identification information to be compared is the same. In this embodiment of the application, the first identification information in the target group signature digital certificate is matched with the first identification information to be compared to determine whether the first identification information in the target group signature digital certificate is compared with the first to be compared The identification information is the same. By matching the second identification information in the target group signature digital with the second identification information to be compared, it is determined whether the second identification information in the digital certificate of the target group signature is the same as the second identification information to be compared.

In step S450, if they are the same, it is determined that the revocation of the target group signature digital certificate is legal.

In this embodiment of the application, if the first identification information in the target group signature digital certificate is the same as the first identification information to be compared, and the second identification information in the target group signature digital certificate is the same as the second identification information to be compared, It is determined that the revocation of the signature digital certificate of the target group is legal.

To sum up, because the group signature algorithm is run by revoking the private key of the group member of the target group signature digital certificate to group the target digest generated by the target random number corresponding to the target group signature digital certificate to obtain the revoked group signature, That is, it hides the group members who revoke the signature digital certificate of the target group, realizes the anonymous revocation of the signature digital certificate of the target group, and provides a method of hiding the group members who revoke the signature digital certificate of the target group. Simple and easy to implement.

It should be noted that although the various steps of the method in the present disclosure are described in a specific order in the drawings, this does not require or imply that these steps must be performed in the specific order, or that all the steps shown must be performed to Achieve the desired result. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step for execution, and/or one step may be decomposed into multiple steps for execution, etc.

In the exemplary embodiment of the present disclosure, a group signature digital certificate revocation device is also provided. As shown in FIG. 5, the group signature digital certificate revocation device 500 may include: a first acquisition module 501, a first calculation module 502 , Signature module 503, release revocation module 504, where:

The first obtaining module 501 is configured to respond to the target group signature digital certificate revocation request, and obtain the target random number corresponding to the target group signature digital certificate;

The first operation module 502 is configured to perform a first hash operation on the target random number to obtain a target summary;

The signature module 503 is configured to run a group signature algorithm to group the target digest by revoking the private key of the group member of the target group signature digital certificate to obtain a revocation group signature that revokes the target group signature digital certificate;

The publication revocation module 504 is configured to publish the target random number and the revocation group signature to revoke the target group signature digital certificate.

In an exemplary embodiment of the present disclosure, the device 500 may further include:

The first generation module is used to respond to the target group signature digital certificate generation request and generate the group signature digital certificate;

The second operation module is used to obtain the target random number and perform a second hash operation on the target random number to obtain identification information;

The second generation module is configured to generate the target group signature digital certificate according to the identification information and the group signature digital certificate.

The second obtaining module is configured to respond to the legality verification request for the revocation of the target group signature digital certificate, and obtain the published revocation group signature and the target random number;

The first verification module is configured to verify the revocation group signature through the group public key, the revocation group signature, and the published target random number;

The third operation module is configured to perform the second hash operation on the published target random number if the revocation group signature verification is passed to obtain the identification information to be compared;

The first judgment module is used to judge whether the identification information in the target group signature digital certificate is the same as the identification information to be compared;

The first determining module is used for determining that the revocation of the target group signature digital certificate is legal if they are the same.

In an exemplary embodiment of the present disclosure, the second computing module may include:

The first operation unit is configured to obtain the target random number and perform a first sub-hash operation on the target random number to obtain first identification information;

The second operation unit is configured to perform a second sub-hash operation on the target random number to obtain second identification information;

The second generation module is specifically configured to generate the target group signature digital certificate according to the first identification information, the second identification information, and the group signature digital certificate.

The third obtaining module is configured to respond to the legality verification request for the revocation of the target group signature digital certificate, and obtain the published revocation group signature and the target random number;

The second verification module is configured to verify the revocation group signature through the group public key, the revocation group signature, and the published target random number;

The fourth operation module is configured to perform the first sub-hash operation on the published target random number if the revocation group signature verification is passed to obtain the first identification information to be compared, and compare the published Performing the second sub-hashing operation on the target random number to obtain second identification information to be compared;

The second judgment module is configured to judge whether the first identification information in the target group signature digital certificate is the same as the first identification information to be compared, and whether the second identification information in the target group signature digital certificate is the same as The second identification information to be compared is the same;

The second determining module is used for determining that the revocation of the target group signature digital certificate is legal if they are the same.

In an exemplary embodiment of the present disclosure, both the second verification module and the first verification module may include:

A decryption unit, configured to decrypt the revocation group signature by using the group public key to obtain the target digest;

An arithmetic unit, configured to perform the first hash operation on the target random number to obtain a summary to be compared;

A matching unit, configured to match the target abstract with the abstract to be compared;

The first determining unit is configured to determine that the revocation group signature passes verification if it matches;

The second determining unit is configured to determine that the revocation group signature fails the verification if there is no match.

The specific details of each of the above-mentioned group signature digital certificate revocation device modules have been described in detail in the corresponding group signature digital certificate revocation method, so it will not be repeated here.

It should be noted that although several modules or units of the device for execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above may be embodied in one module or unit. Conversely, the features and functions of a module or unit described above can be further divided into multiple modules or units to be embodied.

In an exemplary embodiment of the present disclosure, an electronic device capable of implementing the above method is also provided.

Those skilled in the art can understand that various aspects of the present invention can be implemented as a system, a method, or a program product. Therefore, various aspects of the present invention can be specifically implemented in the following forms, namely: complete hardware implementation, complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software implementations, which can be collectively referred to herein as "Circuit", "Module" or "System".

The electronic device 600 according to this embodiment of the present invention will be described below with reference to FIG. 6. The electronic device 600 shown in FIG. 6 is only an example, and should not bring any limitation to the function and application scope of the embodiment of the present invention.

As shown in FIG. 6, the electronic device 600 is represented in the form of a general-purpose computing device. The components of the electronic device 600 may include but are not limited to: the aforementioned at least one processing unit 610, the aforementioned at least one storage unit 620, a bus 630 connecting different system components (including the storage unit 620 and the processing unit 610), and a display unit 640.

Wherein, the storage unit stores program code, and the program code can be executed by the processing unit 610, so that the processing unit 610 executes the various exemplary methods described in the "exemplary method" section of this specification. Implementation steps. For example, the processing unit 610 may perform step S110 as shown in FIG. 1, responding to the target group signature digital certificate revocation request, and obtain the target random number corresponding to the target group signature digital certificate; step S120: Perform the first hash operation on the random number to obtain the target digest; step S130, run the group signature algorithm by revoking the private key of the group member of the target group signature digital certificate to group the target digest to obtain the revocation The revocation group signature of the target group signature digital certificate; step S140, the target random number and the revocation group signature are published to revoke the target group signature digital certificate.

The storage unit 620 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 6201 and/or a cache storage unit 6202, and may further include a read-only storage unit (ROM) 6203.

The storage unit 620 may also include a program/utility tool 6204 having a set of (at least one) program module 6205. Such program module 6205 includes but is not limited to: an operating system, one or more application programs, other program modules, and program data, Each of these examples or some combination may include the implementation of a network environment.

The bus 630 may represent one or more of several types of bus structures, including a storage unit bus or a storage unit controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local area using any bus structure among multiple bus structures. bus.

The electronic device 600 may also communicate with one or more external devices 670 (such as keyboards, pointing devices, Bluetooth devices, etc.), and may also communicate with one or more devices that enable users to interact with the electronic device 600, and/or communicate with Any device (eg, router, modem, etc.) that enables the electronic device 600 to communicate with one or more other computing devices. This communication can be performed through an input/output (I/O) interface 650. In addition, the electronic device 600 may also communicate with one or more networks (for example, a local area network (LAN), a wide area network (WAN), and/or a public network, such as the Internet) through the network adapter 660. As shown in the figure, the network adapter 660 communicates with other modules of the electronic device 600 through the bus 630. It should be understood that although not shown in the figure, other hardware and/or software modules can be used in conjunction with the electronic device 600, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives And data backup storage system, etc.

Through the description of the foregoing embodiments, those skilled in the art can easily understand that the exemplary embodiments described herein can be implemented by software, or can be implemented by combining software with necessary hardware. Therefore, the technical solution according to the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, U disk, mobile hard disk, etc.) or on the network , Including several instructions to make a computing device (which may be a personal computer, server, terminal device, or network device, etc.) execute the method according to the embodiments of the present disclosure.

In the exemplary embodiment of the present disclosure, there is also provided a computer-readable storage medium on which is stored a program product capable of implementing the above method in this specification. In some possible implementation manners, various aspects of the present invention may also be implemented in the form of a program product, which includes program code, and when the program product runs on a terminal device, the program code is used to make the The terminal device executes the steps according to various exemplary embodiments of the present invention described in the above "Exemplary Method" section of this specification.

As shown in reference 7, a program product 700 for implementing the above method according to an embodiment of the present invention is described. It can adopt a portable compact disk read-only memory (CD-ROM) and include program code, and can be installed in a terminal device, such as Run on a personal computer. However, the program product of the present invention is not limited thereto. In this document, the readable storage medium can be any tangible medium that contains or stores a program, and the program can be used by or in combination with an instruction execution system, device, or device.

The program product can use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or device, or a combination of any of the above. More specific examples (non-exhaustive list) of readable storage media include: electrical connections with one or more wires, portable disks, hard disks, random access memory (RAM), read only memory (ROM), erasable Type programmable read only memory (EPROM or flash memory), optical fiber, portable compact disk read only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination of the above.

The computer-readable signal medium may include a data signal propagated in baseband or as a part of a carrier wave, and readable program code is carried therein. This propagated data signal can take many forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. The readable signal medium may also be any readable medium other than a readable storage medium, and the readable medium may send, propagate, or transmit a program for use by or in combination with the instruction execution system, apparatus, or device.

The program code contained on the readable medium can be transmitted by any suitable medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

The program code used to perform the operations of the present invention can be written in any combination of one or more programming languages. The programming languages include object-oriented programming languages—such as Java, C++, etc., as well as conventional procedural styles. Programming language-such as "C" language or similar programming language. The program code can be executed entirely on the user's computing device, partly on the user's device, executed as an independent software package, partly on the user's computing device and partly executed on the remote computing device, or entirely on the remote computing device or server Executed on. In the case of a remote computing device, the remote computing device can be connected to a user computing device through any kind of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computing device (for example, using Internet service providers). Business to connect via the Internet).

In addition, the above-mentioned drawings are merely schematic illustrations of the processing included in the method according to the exemplary embodiment of the present invention, and are not intended for limitation. It is easy to understand that the processing shown in the above drawings does not indicate or limit the time sequence of these processings. In addition, it is easy to understand that these processes can be executed synchronously or asynchronously in multiple modules, for example.

Those skilled in the art will easily think of other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. This application is intended to cover any variations, uses, or adaptive changes of the present disclosure, which follow the general principles of the present disclosure and include common knowledge or conventional technical means in the technical field not disclosed in the present disclosure . The description and embodiments are only regarded as exemplary, and the true scope and spirit of the present disclosure are pointed out by the claims.

It should be understood that the present disclosure is not limited to the precise structure that has been described above and shown in the drawings, and various modifications and changes can be made without departing from its scope. The scope of the present disclosure is only limited by the appended claims.

Claims

A group signature digital certificate revocation method, applied to blockchain, is characterized in that it includes:

Respond to the target group signature digital certificate revocation request, and obtain the target random number corresponding to the target group signature digital certificate;

Perform a first hash operation on the target random number to obtain a target summary;

Run a group signature algorithm to group the target digest by revoking the private key of the group member of the target group signature digital certificate, so as to obtain the revoked group signature that revokes the target group signature digital certificate;

Publish the target random number and the revocation group signature to revoke the target group signature digital certificate.
The method for revocation of a group signature digital certificate according to claim 1, wherein the method further comprises:

In response to the target group signature digital certificate generation request, generate a group signature digital certificate;

Acquiring the target random number, and performing a second hash operation on the target random number to obtain identification information;

The target group signature digital certificate is generated according to the identification information and the group signature digital certificate.
The method for revocation of a group signature digital certificate according to claim 2, wherein the method further comprises:

Responding to the legality verification request for the revocation of the target group signature digital certificate, obtaining the published revocation group signature and the target random number;

Verifying the revocation group signature through the group public key, the revocation group signature, and the published target random number;

If the verification of the revocation group signature passes, the second hash operation is performed on the published target random number to obtain the identification information to be compared;

Judging whether the identification information in the target group signature digital certificate is the same as the identification information to be compared;

If they are the same, it is determined that the revocation of the signature digital certificate of the target group is legal.
The method for revocation of a group signature digital certificate according to claim 2, wherein said acquiring said target random number and performing a second hash operation on said target random number to obtain identification information comprises:

Acquiring the target random number, and performing a first sub-hash operation on the target random number to obtain first identification information;

Performing a second sub-hash operation on the target random number to obtain second identification information;

The generating the target group signature digital certificate according to the identification information and the group signature digital certificate includes:

The target group signature digital certificate is generated according to the first identification information, the second identification information and the group signature digital certificate.
The method for revocation of a group signature digital certificate according to claim 4, wherein the method further comprises:

Responding to the legality verification request for the revocation of the target group signature digital certificate, obtaining the published revocation group signature and the target random number;

Verifying the revocation group signature through the group public key, the revocation group signature, and the published target random number;

If the revocation group signature verification is passed, the first sub-hash operation is performed on the published target random number to obtain the first identification information to be compared, and the published target random number is performed The second sub-hash operation to obtain the second identification information to be compared;

Determine whether the first identification information in the target group signature digital certificate is the same as the first identification information to be compared, and whether the second identification information in the target group signature digital certificate is compared with the second identification information The identification information is the same;

If they are all the same, it is determined that the revocation of the signature digital certificate of the target group is legal.
The method for revocation of a group signature digital certificate according to claim 3 or 5, wherein the verifying the revocation group signature through the group public key, the revocation group signature, and the published target random number comprises:

Decrypt the revocation group signature by the group public key to obtain the target digest;

Performing the first hash operation on the published target random number to obtain a summary to be compared;

Matching the target abstract with the abstract to be compared;

If it matches, it is determined that the revocation group signature passes verification;

If it does not match, it is determined that the revocation group signature fails the verification.
The group signature digital certificate revocation method according to claim 4, wherein the generating the target group signature digital certificate according to the first identification information, the second identification information and the group signature digital certificate comprises :

Mark the group signature digital certificate with the first identification information and the second identification information;

The marked group signature digital certificate is determined as the target group signature digital certificate.
The method for revocation of a group signature digital certificate according to claim 4, wherein the group signature digital certificate includes an extension field, and the group signature is based on the first identification information, the second identification information, and the group signature. The digital certificate generating the target group signature digital certificate includes:

The first identification information and the second identification information are stored in the extended field of the group signature digital certificate to generate the target group signature digital certificate.
The group signature digital certificate revocation method of claim 4, wherein the target group signature digital certificate is generated according to the first identification information, the second identification information, and the group signature digital certificate After that, the method further includes:

The target group signature digital certificate is associated with the target random number and then published.
A group signature digital certificate revocation device, applied to a blockchain, is characterized in that it includes:

The first obtaining module is configured to respond to the target group signature digital certificate revocation request, and obtain the target random number corresponding to the target group signature digital certificate;

The first operation module is configured to perform a first hash operation on the target random number to obtain a target summary;

The signature module is configured to run a group signature algorithm to group the target digest by revoking the private key of the group member who revokes the target group signature digital certificate to obtain a revoked group signature that revokes the target group signature digital certificate;

The publishing and revocation module is used for publishing the target random number and the revocation group signature to revoke the target group signature digital certificate.
A group-signature digital certificate revocation electronic device, which is characterized by comprising a processor and a memory, and computer-readable instructions are stored on the memory. When the computer-readable instructions are executed by the processor, the processor is used for The following processing:

Respond to the target group signature digital certificate revocation request, and obtain the target random number corresponding to the target group signature digital certificate;

Perform a first hash operation on the target random number to obtain a target summary;

Run a group signature algorithm to group the target digest by revoking the private key of the group member of the target group signing digital certificate, so as to obtain a revoked group signature that revokes the target group signing digital certificate;

Publish the target random number and the revocation group signature to revoke the target group signature digital certificate.
The electronic device according to claim 11, wherein when the computer-readable instruction is executed by the processor, the processor is further configured to perform the following processing:

In response to the target group signature digital certificate generation request, generate a group signature digital certificate;

Acquiring the target random number, and performing a second hash operation on the target random number to obtain identification information;

The target group signature digital certificate is generated according to the identification information and the group signature digital certificate.
The electronic device according to claim 11, wherein when the computer-readable instruction is executed by the processor, the processor is further configured to perform the following processing:

Responding to the legality verification request for the revocation of the target group signature digital certificate, obtaining the published revocation group signature and the target random number;

Verifying the revocation group signature through the group public key, the revocation group signature, and the published target random number;

If the verification of the revocation group signature passes, the second hash operation is performed on the published target random number to obtain the identification information to be compared;

Judging whether the identification information in the target group signature digital certificate is the same as the identification information to be compared;

If they are the same, it is determined that the revocation of the signature digital certificate of the target group is legal.
The electronic device according to claim 12, wherein said acquiring said target random number and performing a second hash operation on said target random number to obtain identification information comprises:

Acquiring the target random number, and performing a first sub-hash operation on the target random number to obtain first identification information;

Performing a second sub-hash operation on the target random number to obtain second identification information;

The generating the target group signature digital certificate according to the identification information and the group signature digital certificate includes:

The target group signature digital certificate is generated according to the first identification information, the second identification information and the group signature digital certificate.
The electronic device according to claim 14, wherein when the computer-readable instructions are executed by the processor, the processor is further configured to perform the following processing:

Responding to the legality verification request for the revocation of the target group signature digital certificate, obtaining the published revocation group signature and the target random number;

Verifying the revocation group signature through the group public key, the revocation group signature, and the published target random number;

If the revocation group signature verification is passed, the first sub-hash operation is performed on the published target random number to obtain the first identification information to be compared, and the published target random number is performed The second sub-hash operation to obtain the second identification information to be compared;

Determine whether the first identification information in the target group signature digital certificate is the same as the first identification information to be compared, and whether the second identification information in the target group signature digital certificate is compared with the second identification information The identification information is the same;

If they are all the same, it is determined that the revocation of the signature digital certificate of the target group is legal.
A computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the processor is used to implement the following steps:

Acquiring a sample text set, the sample text set including a plurality of sample texts and emotion classification labels corresponding to each of the sample texts;

Correcting the initial cost according to the number distribution of the sentiment classification tags in the sample text set to obtain the corrected cost;

Training a lifting algorithm learning model through the sample text set and the correction cost to obtain a text emotion recognition model;

The text to be recognized is recognized by the text emotion recognition model, and the emotion recognition result of the text to be recognized is obtained.
The computer-readable storage medium according to claim 16, wherein when the computer program is executed by the processor, the processor further causes the processor to perform the following processing:

In response to the target group signature digital certificate generation request, generate a group signature digital certificate;

Acquiring the target random number, and performing a second hash operation on the target random number to obtain identification information;

The target group signature digital certificate is generated according to the identification information and the group signature digital certificate.
The computer-readable storage medium according to claim 17, wherein when the computer program is executed by the processor, the processor further causes the processor to perform the following processing:

Responding to the legality verification request for the revocation of the target group signature digital certificate, obtaining the published revocation group signature and the target random number;

Verifying the revocation group signature through the group public key, the revocation group signature, and the published target random number;

If the verification of the revocation group signature passes, the second hash operation is performed on the published target random number to obtain the identification information to be compared;

Judging whether the identification information in the target group signature digital certificate is the same as the identification information to be compared;

If they are the same, it is determined that the revocation of the signature digital certificate of the target group is legal.
18. The computer-readable storage medium according to claim 17, wherein said acquiring said target random number and performing a second hash operation on said target random number to obtain identification information comprises:

Acquiring the target random number, and performing a first sub-hash operation on the target random number to obtain first identification information;

Performing a second sub-hash operation on the target random number to obtain second identification information;

The generating the target group signature digital certificate according to the identification information and the group signature digital certificate includes:

The target group signature digital certificate is generated according to the first identification information, the second identification information and the group signature digital certificate.
The computer-readable storage medium according to claim 19, wherein when the computer program is executed by the processor, the processor further causes the processor to perform the following processing:

Responding to the legality verification request for the revocation of the target group signature digital certificate, obtaining the published revocation group signature and the target random number;

Verifying the revocation group signature through the group public key, the revocation group signature, and the published target random number;

If the revocation group signature verification is passed, the first sub-hash operation is performed on the published target random number to obtain the first identification information to be compared, and the published target random number is performed The second sub-hash operation to obtain the second identification information to be compared;

Determine whether the first identification information in the target group signature digital certificate is the same as the first identification information to be compared, and whether the second identification information in the target group signature digital certificate is compared with the second identification information The identification information is the same;

If they are the same, it is determined that the revocation of the target group signature digital certificate is legal.