CN112069547B - Identity authentication method and system for supply chain responsibility main body - Google Patents

Abstract

The embodiment of the invention provides a method and a system for authenticating identity of a supply chain responsibility main body, comprising the following steps: generating a public-private key pair of the responsibility main body according to the identity of the responsibility main body and the user password, wherein the public-private key pair comprises a system main private key and a system main public key; generating a signature private key according to the system main private key and the user identifier; carrying out digital signature encryption on the user data of the responsible main body by using a signature private key to obtain signature data; and verifying the signature data by using the identity. According to the identity authentication method and system for the supply chain responsibility main body, provided by the embodiment of the invention, the user-set password is added when the system main private key and the signature private key are generated, and the signature is performed after double verification of the user identifier and the user password is needed when the signature is used, so that the safety of the main private key and the signature private key is improved, and the problems of inaccurate verification or user data leakage can be effectively prevented.

Description

A supply chain responsible subject identity authentication method and system

Technical field

The present invention relates to the field of blockchain technology, and in particular to a supply chain responsible subject identity authentication method and system.

Background technique

In the agricultural product information traceability system, identity information is scattered in various systems. Each system requires users to fill in identity information for registration and real-name authentication (know-your-customer, referred to as KYC authentication), and the system needs to set up a dedicated person to verify the registration information. Reviewing and confirming not only wastes the user's time, but also consumes the human, financial and material resources of the platform. With the development of blockchain business, it is necessary to establish a secure digital identity authentication system to allow users to use their digital identities in different distributed applications of blockchain.

Digital identity (DI), also known as digital identification, is information that can uniquely determine the identity of an entity. The digital identity should consist of information that the entity cannot deny, such as the entity’s identifiable name, email address, ID number, phone number, etc. Digital identity is also a code representation of real identity information through a digital identity, responsible for connecting physical objects in the physical world and objects in the digital world. The next generation Internet is an era of comprehensive digitalization. Real-world organizations, enterprises, individuals, various commodities, and even various equipment objects need to have identities that represent themselves in the digital world in the digital environment.

Digital identity can be represented by identification codes, such as organization codes, enterprise unified credit codes, personal ID numbers, mobile phone numbers, email addresses, product barcodes, various codes, etc. With the advent of the blockchain era, the use of unified digital identities has become the basis for data sharing and exchange in the blockchain world.

However, when it comes to identity authentication of agricultural product supply chain subjects, there is an inconsistency problem between the physical identity and digital identity of visitors to agricultural product supply chain nodes, making it impossible to effectively trace the authenticity of the responsible subject and the effectiveness of information transmission.

Contents of the invention

Embodiments of the present invention provide a supply chain responsible subject identity authentication method and system to solve the shortcomings of user data security and confidentiality in the existing technology, and achieve reasonable and efficient performance on the basis of enhancing user data security protection. , a safe method to authenticate the identity of supply chain responsible entities.

In the first aspect, embodiments of the present invention provide a supply chain responsible subject identity authentication method, which mainly includes: generating a public-private key pair of the responsible subject according to the identity identifier and user password of the responsible subject, and a public-private key pair. Including the system master private key and the system master public key; generate a signature private key based on the system master private key and user identification; use the signature private key to digitally sign and encrypt the user data of the responsible subject to obtain the signature data; use the identity identifier to perform signature data verify.

As an option, the above-mentioned generation of the public-private key pair of the responsible subject based on the identity of the responsible subject and the user password mainly includes: using the key generation center to perform a hash encryption on the identity of the responsible subject and the user password, Generate a public-private key pair and publish the system master public key to the blockchain for public disclosure.

Optionally, the above method of generating a signature private key based on the system master private key and user identification mainly includes: using a key generation center to perform secondary hash encryption on the system master private key and user identification to generate a signature private key.

Optionally, the above-mentioned method uses the signature private key to digitally sign and encrypt the user data of the responsible subject to obtain the signature data, including:

S31, calculate the element g in the group G _T about the user data, g=e(P ₁ ,P _pub-8 ); the element g represents the intermediate encryption result; e represents the double from the group G ₁ × G ₂ to the group G _T Linear pair, G ₁ and G ₂ represent the additive cyclic group, G _T is the multiplicative cyclic group, the groups G ₁ , G ₂ and G _T have the same order; P ₁ represents the generator of the group G ₁ , P _pub-8 Represents the system master private key;

S32, generate a random number r, r∈[1,N-1]; r represents a random number selected within a predetermined range, and N represents the order of groups G ₁ , G ₂ and G _T ;

S33, calculate the element w in the group G _T , w= ^gr , and convert the data type of w into a bit string; w represents the component of the ciphertext;

S34, calculate the certificate h, h=H ₂ (M||w, N); h represents the certificate, H ₂ () represents the secure hash function, M represents the bit string corresponding to the user data, and the symbol || represents the associated operation relationship ;

S35, calculate the certificate l, l=(r-h)mod N; if l=0, return to step S32; if l≠0, enter step S36;

S36, calculate the element S in the group G ₁ , S=[l]ds _A ; ds _A represents the signature private key, [l]ds _A represents the dot multiplication operation of l and ds _A ;

S37: Obtain the signature data K, K=(h, S).

As an option, the above-mentioned verification of signature data using identity identifiers mainly includes:

Assume that the signature data to be verified is represented by K’, K’=(h’, S’), and the bit string corresponding to the user data to be verified is represented by M’;

S41, check whether h′∈[1,N-1] is established; if it is not established, the verification fails; if it is established, step S42 is executed;

S42, convert the data type of S' into a point on the elliptic curve, and check whether S'∈G ₁ is established; if not, the verification fails; if it is established, step S43 is executed;

S43, calculate the element g in the group G _T , g=e(P ₁ ,P' _pub-8 ); P' _pub-8 represents the system master public key;

S44, calculate the element t in the group G _T , t=g ^h ;

S45, calculate certificate h ₁ , h ₁ =H ₁ (ID _A ||hid,N); ID _A represents the user's identity, hid represents the certificate id; H ₁ () represents a secure hash function;

S46, calculate the element P in the group G ₂ , P=[h ₁ ]P ₂ +P'_pub-s; P ₂ represents the generator of the group G ₂ , and P' _pub-s represents the system master public key;

S47, calculate the element u in the group G _T , u=e(S′, P);

S48, calculate the element w' in the group G _T , w'=u·t, and convert the data type of w' into a bit string; u and t respectively represent the components of the system's master private key;

S49, calculate the certificate h ₂ =H ₂ (M'||w', N), and check whether h ₂ =h' is established; if it is established, the verification passes; otherwise, the verification fails.

Optionally, the supply chain responsible subject identity authentication method provided by the embodiment of the present invention may also include: based on the national secret SM9 algorithm to generate a public-private key pair of the responsible subject based on the identity of the responsible subject and the user password and Generate a signature private key based on the system master private key and user ID.

Alternatively, the user identification may be an identification constructed from a file including company name, social unified credit code, address, legal representative and other information.

In a second aspect, embodiments of the present invention also provide a supply chain responsible subject identity authentication system, which mainly includes: a public-private key generation unit, a signature private key generation unit, an encryption unit and a verification unit, wherein: the public-private key The generation unit is mainly used to generate the public-private key pair of the responsible subject based on the identity of the responsible subject and the user password. The public-private key pair includes the system master private key and the system master public key; the signature private key generation unit is mainly used to Generate a signature private key based on the system master private key and user identification; the encryption unit is mainly used to use the signature private key to digitally sign and encrypt the user data of the responsible subject, and obtain the signature data; the verification unit is mainly used to verify the signature data using the identity identification .

In a third aspect, embodiments of the present invention also provide an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the program, any one of the above is implemented. The steps of the supply chain responsibility subject identity authentication method.

In a fourth aspect, embodiments of the present invention also provide a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the identity authentication of the supply chain responsible subject is implemented as described above. Method steps.

The supply chain responsible subject identity authentication method and system provided by the embodiments of the present invention add the password set by the user when generating the system master private key and signature private key. When using the signature, it needs to be double verified by the user ID and user password. Signature improves the security of the master private key and signature private key, and can effectively prevent inaccurate verification or leakage of user information.

Description of the drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description These are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without exerting creative efforts.

Figure 1 is a schematic structural diagram of a supply chain responsible subject identity authentication method provided by an embodiment of the present invention;

Figure 2 is a schematic flow diagram of a supply chain responsible subject identity authentication system provided by an embodiment of the present invention;

Figure 3 is a schematic structural diagram of an electronic device provided by an embodiment of the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments These are some embodiments of the present invention, rather than all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without making creative efforts fall within the scope of protection of the present invention.

An embodiment of the present invention provides a supply chain responsible subject identity authentication method, as shown in Figure 1, including but not limited to the following steps:

Step S1: Generate a public-private key pair of the responsible subject based on the identity of the responsible subject and the user password. The public-private key pair includes the system master private key and the system master public key;

Step S2: Generate a signature private key based on the system master private key and user identification;

Step S3: Use the signature private key to digitally sign and encrypt the user data of the responsible subject to obtain the signature data;

Step S3: Use the identity identifier to verify the signature data.

Among them, step S1 can be regarded as a process of encrypting the identity of the responsible subject using the user password based on blockchain technology; among them, the identity of the responsible subject can be the mobile phone number, ID number, traceability code, Enterprise unified credit code, email address, product barcode and other information exclusive to the responsible party for identification. Generally speaking, there is a one-to-one correspondence between the identity identifier and the person's subject, that is, the corresponding responsible subject can be known through any identity identifier.

The blockchain algorithm used to generate the public-private key pair of the responsible subject may be an identification cryptographic method based on domestic SM2, SM3 or SM9, which is not specifically limited in this embodiment of the present invention. Specifically, it can be carried out through the key generation center (KGC) of the blockchain. KGC is a trusted organization system responsible for selecting system parameters, generating master keys and generating user private keys. When using it to generate digital identities, the system master key is the key at the top of the identity cryptographic key hierarchy. , mainly includes the system master private key and the system master public key. The system master public key is used to publish to the blockchain publicly, while the system master private key is encrypted by KGC and handed over to the user for secret preservation. In the identification password, the system master private key is generated by KGC through a random number generator, and the system master public key is generated by the system master private key combined with system parameters.

It should be noted that when generating the system master private key, add the user password, use the identity identifier and password to generate the system master private key and the system master public key, which are one secret and one signature, and dynamically change with the encryption time and number of times, ensuring The master private key not only has attributes set by the user, but also improves the security of the master private key.

In step S2, after generating the public-private key pair, the supply chain responsible subject identity authentication method provided by the embodiment of the present invention further encrypts the system master private key twice. During the encryption process, in addition to adding the user In addition to the password, the system master private key can be further combined with the user identification to solve the inconsistency problem between the physical identity and the digital identity of the node user of the agricultural product supply chain, thereby ensuring that the user's physical identity corresponds to the digital identity. The user identification is identification information uniquely corresponding to each user, such as fingerprint information, pupil information, signature information, seal information, etc., which is not specifically limited in this embodiment of the present invention. When using the system's master private key and user identification to generate a signature private key, a one-key-one-sign method is used, and it changes dynamically, thus ensuring the authenticity and credibility of the digital identity.

Step S3 can be regarded as a step of digitally signing user data using the twice-encrypted private key constructed in the previous step, that is, the signature private key. Since the signature private key used in this step also contains the user's password, identity information, and user identification information, it effectively increases the security of user data while ensuring the one-to-one correspondence between the digital signature and the user's identity. Security and privacy.

Step S4 can be regarded as a step of verifying the encrypted user data. In the verification process, only the identification is needed as the basis for digital identity recognition, digital signature, and digital verification in the Internet of Things world, that is, the signature data can be verified, and the verification steps are simplified while ensuring the accuracy of the verification. .

The supply chain responsible subject identity authentication method provided by the embodiment of the present invention adds the password set by the user when generating the system master private key and signature private key. When using the signature, it is necessary to double-verify the user ID and user password before signing. The security of the master private key and signature private key has been improved, which can effectively prevent inaccurate verification or leakage of user information.

Based on the contents of the above embodiments, as an optional embodiment, generating the public-private key pair of the responsible subject according to the identity of the responsible subject and the user password may include: using a key generation center to generate the key pair for the responsible subject. The subject's identity and user password are hashed and encrypted to generate a public-private key pair, and the system's master public key is published to the blockchain for disclosure.

Specifically, the entire step can be divided into two aspects: hashing and encryption. Hash is to convert the target text (that is, the text corresponding to the identity identifier and user password) into an irreversible hash string of the same length. (or called message digest); and encryption (Encrypt) converts the target text into reversible ciphertext with different lengths. Among them, the encryption algorithm in the present invention may be based on the national secret SM2, SM3 or SM9, etc., which is not specifically limited in the embodiment of the present invention.

The supply chain responsible subject identity authentication method provided by the embodiment of the present invention is based on the existing responsible subject encryption based on national secrets SM2, SM3 or SM9, etc., and combines the user password to further ensure the security of user data.

Based on the content of the above embodiments, as an optional embodiment, the above-mentioned generation of signature private keys based on the system master private key and user identification may include: using a key generation center to perform secondary hashing on the system master private key and user identification. Hash encryption to generate a signature private key.

Specifically, in the embodiment of the present invention, the system master private key is re-encrypted through KGC, which includes re-encrypting the system master private key obtained in the previous step combined with the user identification, so that the signature private key after the re-encryption is , not only includes the password information set by the user and the user's identity information, but also the user's identification information. On the basis of providing sufficient security and confidentiality for user data, it can effectively prevent inaccurate verification or user identification information. Data leakage occurs.

Optionally, during the secondary encryption process, another user password can also be set to further enhance data security by using multi-layer password protection.

Based on the contents of the above embodiments, as an optional embodiment, using the signature private key to digitally sign and encrypt the user data of the responsible subject and obtain the signature data may include the following steps:

S31, calculate the element g in the group G _T about the user data, g=e(P ₁ ,P _pub-8 ); the element g represents the intermediate encryption result; e represents the double from the group G ₁ × G ₂ to the group G _T Linear pair, G ₁ and G ₂ represent the additive cyclic group, G _T is the multiplicative cyclic group, the groups G ₁ , G ₂ and G _T have the same order; P ₁ represents the generator of the group G ₁ , P _pub-8 Represents the system master private key;

S32, generate a random number r, r∈[1,N-1]; r represents a random number selected within a predetermined range, and N represents the order of groups G ₁ , G ₂ and G _T ;

S33, calculate the element w in the group G _T , w= ^gr , and convert the data type of w into a bit string; w represents the component of the ciphertext;

S34, calculate the certificate h, h=H ₂ (M||w, N); h represents the certificate, H ₂ () represents the secure hash function, M represents the bit string corresponding to the user data, and the symbol || represents the associated operation relationship ;

S35, calculate the certificate l, l=(r-h)mod N; if l=0, return to step S32; if l≠0, enter step S36;

S36, calculate the element S in the group G ₁ , S=[l]ds _A ; ds _A represents the signature private key, [l]ds _A represents the dot multiplication operation of l and ds _A ;

S37: Obtain the signature data K, K=(h, S).

Based on the contents of the above embodiments, as an optional embodiment, the above-mentioned verification of signature data using the identity identifier may include the following steps:

For convenience of expression, assume that the signature data to be verified is expressed as K’, K’ = (h’, S’), and the bit string corresponding to the user data to be verified is expressed as M’;

S41, check whether h′∈[1,N-1] is established; if it is not established, the verification fails; if it is established, step S42 is executed;

S42, convert the data type of S′ into a point on the elliptic curve, and check whether S′∈G ₁ is established; if not, the verification fails; if it is established, step S43 is executed;

S43, calculate the element g in the group G _T , g=e(P ₁ ,P' _pub-8 ); P' _pub-8 represents the system master public key;

S44, calculate the element t in the group G _T , t=g ^h ;

S45, calculate certificate h ₁ , h ₁ =H ₁ (ID _A ||hid,N); ID _A represents the user's identity, hid represents the certificate id; H ₁ () represents a secure hash function;

S46, calculate the element P in the group G ₂ , P=[h ₁ ]P ₂ +P'_pub-s; P ₂ represents the generator of the group G ₂ , and P' _pub-s represents the system master public key;

S47, calculate the element u in the group G _T , u=e(S′, P);

S48, calculate the element w' in the group G _T , w'=u·t, and convert the data type of w' into a bit string; u and t respectively represent the components of the system's master private key;

S49, calculate the certificate h ₂ =H ₂ (M'||w', N), and check whether h ₂ =h' is established; if it is established, the verification passes; otherwise, the verification fails.

It should be noted that the identity authentication method of the supply chain responsible subject provided by the embodiment of the present invention is an identity-based digital signature algorithm implemented using elliptic curve pairs. The signer of this algorithm holds an identity and a corresponding signature private key. , the signature private key is generated by the key generation center through the combination of the system master private key and the signer's user ID. The signer uses the signature private key to generate a digital signature on the data, and the verifier uses the signer's user ID to verify the reliability of the signature.

Furthermore, in the supply chain responsible subject identity authentication method provided by the embodiment of the present invention, before the generation and verification process of the signature, a cryptographic hash function is used to compress the message M to be signed and the message M' to be verified.

Based on the contents of the above embodiments, as an optional embodiment, the identity authentication method of the supply chain responsible subject provided by the embodiment of the present invention also includes: based on the national secret SM9 algorithm to generate the responsibility based on the identity of the responsible subject and the user password. The subject's public-private key pair and generates a signature private key based on the system master private key and user ID.

The user identification may be an identification constructed from a file including company name, social unified credit code, address, legal representative and other information.

In order to more clearly explain the implementation steps of the supply chain responsible subject identity authentication method provided by the embodiment of the present invention, in this embodiment, in order to realize the inconsistency problem between the physical identity and digital identity of the supply chain subject in the traceability of the agricultural product supply chain, This ensures that the physical identity of the operator corresponds to the digital identity. When each traceability entity in the agricultural product supply chain registers on the blockchain, a file will be created that includes the company name, social unified credit code, address, legal representative and other information. Below, a specific application of the embodiment of the present invention will be described using the registrant's mobile phone number as the user identification, including but not limited to the following steps:

Step 1: Generate signature private key method

signPrivateKey=kgc.genPrivateKey(signMasterKeyPair.getPrivateKey(),id_A,userPasswd,PrivateKeyType.KEY_SIGN);

Among them, signPrivateKey: signature private key;

kgc.genPrivateKey(): KGC generates private key method;

signMasterKeyPair.getPrivateKey(): The signature key pair obtains the system private key;

id_A: identification, such as 13988888888;

userPasswd: user password, default is 123456;

PrivateKeyType: private key type

KEY_SIGN: signature private key;

Step 2: Signature method

sm9.sign(signMasterKeyPair.getPublicKey(),signPrivateKey,M.getBytes());

Among them, sm9.sign(): sm9 signature method;

signMasterKeyPair.getPublicKey(): Signing key pair gets the public key;

signPrivateKey: signature private key;

M.getBytes(): The information M that needs to be signed gets the byte stream;

Step 3: Signature verification method

sm9.verify(signMasterKeyPair.getPublicKey(),id_A,M.getBytes(),signature));

Among them, sm9.verify(): sm9 verification signature method;

signMasterKeyPair.getPublicKey(): Signing key pair gets the public key;

id_A: identification, such as 13988888888;

M.getBytes(): The information M that needs to be verified for signature obtains the byte stream;

Signature: Signature byte stream.

The above steps are specifically implemented as follows:

(1) The parameters of SM9 (SM9curve parameters) are selected as follows:

Equation parameter b: 05

Curve parameter t: 60000000 0058F98A

Base domain feature q: B6400000 02A3A6F1 D603AB4F F58EC745 21F2934B 1A7AEEDBE56F9B27 E351457D

Order N of the group: B6400000 02A3A6F1 D603AB4F F58EC744 49F2934B 18EA8BEEE56EE19C D69ECF25

Beta: B6400000 02A3A6F1 D603AB4F F58EC745 21F2934B 1A7AEEDB E56F9B27E351457B

alpha0:00

alpha1：B6400000 02A3A6F1 D603AB4F F58EC745 21F2934B 1A7AEEDB E56F9B27E351457C

Group G1 generates element P1:

93DE051D 62BF718F F5ED0704 487D01D6 E1E40869 09DC3280 E8C4E4817C66DDDD

21FE8DDA 4F21E607 63106512 5C395BBC 1C1C00CB FA602435 0C464CD70A3EA616

Group G2 generator P2:

85AEF3D0 78640C98 597B6027 B441A01F F1DD2C19 0F5E93C4 54806C11D8806141

37227552 92130B08 D2AAB97F D34EC120 EE265948 D19C17AB F9B7213BAF82D65B

17509B09 2E845C12 66BA0D26 2CBEE6ED 0736A96F A347C8BD 856DC76B84EBEB96

A7CF28D5 19BE3DA6 5F317015 3D278FF2 47EFBA98 A71A0811 6215BBA5C999A7C7

(2) The SM9 signature process is as follows:

The generation process of signature master key and user signature private key:

sm9 master private key:

85D5C452 624E6220 90A331D2 512BF750 F32A90EC F766A8A9 845E78C0CB6801E6

Signing master public key Ppub-s:

sm9 master public key:

B26709A8 A3588E68 5972B6CF 56C739C5 4A79E221 0E6C9554 93C39F0FC1316753

4729FA93 1009D8BC 7140987B B6E8D2CC 170AD6DC E6022A85 5FDDF385EE1CE9B8

80A48294 96BA8AC0 FA7FF1A6 E9F09452 EE650718 E2D9BDB0 49EA3358803A9E35

6F80A6A6 B9934ADA 9627E1F1 8B214BD6 27517203 88951DA8 83856CA21470478C

Identity IDA of entity A: 13988888888

Hexadecimal representation of ID A: 31333938 38383838 383838

User passwd:123456

Hexadecimal representation of user passwd: 31323334 3536

Signature private key ds_A:

SM9 private key:

64A7A691 C0632A27 0E960674 5E950262 63359A44 C1AADEF7 48C112E8255BEA85

B11ADCC6 02FD0F7E CC26FCF7 766B8DF1 D7A99A5D AB832A22 C71FC39D222E1ACE

Message to be signed M: "** Co., Ltd.";

The hexadecimal representation of M:

2A2AE69C 89E99990 E585ACE5 8FB8

A1: g＝e(P1,Ppub-8)

A2: Generate random number r,

r＝38463060478428560599688230304478404988338972700287671339516099073105502341613

A3:

w = [{ 10671461627578390713146323229168452848078},

{x＝39415410162262081548810966583637685570166404065576895886670655633049190747484, y＝701432321341866406043941270989745408691 78111263857364733016713409743389857872},

{x＝40169016787753967686757293302447837021910497646059611771776930911049585987223, y＝664093786427974892951866185548089798538 38480827041913054783705834346139350886},

{x＝29552723778864333757431552505862979469317059194030112118279102984868205513244, y＝702706950518093928536120388369304686057 67556256171923855264429729184936438930},

{x＝77485204898453876845476007006929315905112531952154204079958743757480080133829,y＝398318327855989080491731026498636100208 65314294014422562854832309433818364089},

{x＝81733983860896289520629489466185085659716647413422286199478502932331605258183, y＝598205069189963384699367777693061872060 09675201189565195451147683401588547802},]

A4:

h＝5684319719326081095363488123625747275228985117062758645981298586619206522474

A5:

l＝32778740759102479504324742180852657713109987583224912693534800486486295819139

A6：

s＝42750716135002385234333160167459259417304341990806279140603252710584027288800,62326983540172281363013405571170190930565 274372882444592220667151351682923762,0

A7：

h＝5684319719326081095363488123625747275228985117062758645981298586619206522474

The signature of message M is (h, s): sm9signature:

h:0C913600 A76B4BF5 742F809F 40A305F7 0ECB0F28 EEBAAE88 98631A913DD1566A

s:5E840C40 57A9623D EBFD719C 42A80612 A7C3508C 452A7117 58BAF0C35EF994E0

89CBD293 028FD183 9B64DE2C 8E082A3C ADF65BBD B57279C7 FEA638F8D86B7CF2

(3) The verification process is as follows:

B1: Check

h＝5684319719326081095363488123625747275228985117062758645981298586619206522474in[1,8243401665457824644483076310524596912931 6048019845143771873730126023764135717] Whether it is established=true

B2: Check S2=true

B3:

G2 = [{ 99447136643211639368240224616690082697798},

{x＝30542872938684341831572435760632268803848589464974587641808957363322247896028, y＝709373930892283969949567480807648211058 50249530366224304002055586102239391039},

{x＝20893915644960652402727915126718410527017015990402852044587531822263893999191, y＝242054332990814666437793862659607449139 57040935941340759824201725943050866748},

{x＝19115750410636842124886811823688111861744651529959974577554822522227818493810,y＝927278735924762264500667507328510972132 9542513716549877906499732354512285015},

{x＝1463487778251251096036683988654861361187802949473946927010136190068736682232,y＝6277282710099837145655720767472781144286 1965890217936278246713378653734992335},

{x＝22860290645784724137498543031120676906887744361672612081600872326053349310277,y＝151289026795933059583970147884506082786 93066043256596795522394403396230705399},]

B4:

t=[{ 04689629513703720334621651352985301619488},

{x＝10337235488848171511204660805848448646242699943495391674465396001582104925338,y＝631266278914292205674149924813543520832 55980905022326324581788925106522479519},

{x＝11111012966485206295664899268978519736347715501907754194407050632763282507303, y＝333227788109830618422519184195694162048 92158550528046413102359568235450647603}

{x＝49354865534096654804410479841937826249959872768620208228354631603366940842194, y＝503165849712760211512782621554774188604 52443358156364694524359089801825426589}

{x＝13426175445859155243369654124347779814265213773806439274881773759045323978081, y＝189052253746384833073822411083669906760 00093545432999225735547446555968080295}

{x＝44884960495267794487568389686907532663979022092363585511691781778840921769798,y＝213455622956211161089986381415427157335 92536223093717574521704716679718858007}].

B5:

h1＝17747406270443163816538606729558334745986233638126423354797579868520096643064

B6：

P = { 8931530462549924281874697199199442171550},{x＝77686904348712971335785515411529252564005416194884699224489368102111309695122, y＝57487846061866216313652706058355910770914281150977951454377955724771163349954},0

B7:

u＝[{x＝13844631013881838922959162113323859777944389820011841199076682808323358555087, y＝616170867940261335451128922837545759 62795429111588643334851124605802448285659},

{x＝68283407124097367194678109867501777523005153016828271006978850700968360380464, y＝304778613106343363265031054204042198902 45256057922862417942766697943931289150},

{x＝1825444314893073161949387977187769254744139222408986148946750593211768025449,y＝1232074318280672162751542425893325338729 0570744805664680682971301620434901961},

{x＝411268636388269395921672003756978951993245809081019153346552008019176936331, y＝61571293667263499238202200894808137369118 889224610980803474053092657245039344},

{x＝17723399229627305093643822899594448170526308417815203456264949796368872016472, y＝783595263906337960160453007896341599384 2622435162714744535475519936410246416},

{x＝12126549737973630771460196238386283890987092000469626928408395733269705620771, y＝388280050454709393500527989392126289405 13985750430418804177573271650835257347}],

B8:

w2 = [{ 810671461627578390713146323229168452848078},

{x＝39415410162262081548810966583637685570166404065576895886670655633049190747484, y＝701432321341866406043941270989745408691 78111263857364733016713409743389857872},

{x＝40169016787753967686757293302447837021910497646059611771776930911049585987223, y＝664093786427974892951866185548089798538 38480827041913054783705834346139350886},

{x＝29552723778864333757431552505862979469317059194030112118279102984868205513244, y＝702706950518093928536120388369304686057 67556256171923855264429729184936438930},

{x＝77485204898453876845476007006929315905112531952154204079958743757480080133829,y＝398318327855989080491731026498636100208 65314294014422562854832309433818364089},

{x＝81733983860896289520629489466185085659716647413422286199478502932331605258183, y＝598205069189963384699367777693061872060 09675201189565195451147683401588547802}];

B9：

h2＝5684319719326081095363488123625747275228985117062758645981298586619206522474

0C913600 A76B4BF5 742F809F 40A305F7 0ECB0F28 EEBAAE88 98631A913DD1566A

Verification result: h=h2 verify OK.

The embodiment of the present invention also provides a supply chain responsible subject identity authentication system, as shown in Figure 2, which mainly includes: a public-private key generation unit 11, a signature private key generation unit 21, an encryption unit 31 and a verification unit 41. Among them, the public-private key generation unit 11 is used to generate a public-private key pair of the responsible subject based on the identity of the responsible subject and the user password. The public-private key pair includes the system master private key and the system master public key. ; The signature private key generation unit is used to generate a signature private key based on the system master private key and user identification; the encryption unit is used to use the signature private key to digitally sign and encrypt the user data of the responsible subject, and obtain the signature data; the verification unit is used to Use the identity identifier to verify the signed data.

Specifically, the supply chain responsible subject identity authentication system provided by the embodiment of the present invention first uses the public-private key generation unit 11 to encrypt the identity of the responsible subject once, obtains the system master private key and the system master public key, and then The user password is integrated into the primary encryption process, effectively improving encryption security. Then, the signature private key generation unit 21 is used to perform secondary encryption on the system master private key to obtain the user's signature private key. In this process, the user identity is integrated, so that the signature private key not only has the attributes set by the user, but also improves the security of the master private key, realizing the correspondence between the digital signature and the user's identity. Further, through the encryption unit 31, the user data is signed using the signature private key to realize digitization of the signature. Finally, the verification unit 41 can use the identity of the responsible subject to verify the signature data.

Furthermore, the supply chain responsible subject identity authentication system provided by the embodiment of the present invention can add a password set by the user in specific applications, which is better than SM2, SM3 and SM9, and is suitable for current usage habits.

Furthermore, the supply chain responsible subject identity authentication system provided by the embodiment of the present invention can be applied in related equipment and software. At the same time, this system can also be widely used to use identification as digital identity recognition, digital signature, and digital identification in the Internet of Things world. Basis for verification.

Furthermore, the supply chain responsible subject identity authentication system provided by the embodiment of the present invention can be preset in safekey, device, mobile phone APP, or can be implemented using a computer system.

Furthermore, the supply chain responsible subject identity authentication system provided by the embodiment of the present invention can be widely used in the digital world and is not limited to the Internet of Things, blockchain, big data, etc.

The supply chain responsible subject identity authentication system provided by the embodiment of the present invention adds the password set by the user when generating the system master private key and signature private key. When using a signature, it is necessary to double-verify the user ID and user password before signing. The security of the master private key and signature private key has been improved, which can effectively prevent inaccurate verification or leakage of user information.

It should be noted that the supply chain responsible subject identity authentication system provided by the embodiment of the present invention, when implemented, can be implemented based on the supply chain responsible subject identity authentication method described in any of the above embodiments. In this regard, this embodiment No further details will be given.

Figure 3 illustrates a schematic diagram of the physical structure of an electronic device. As shown in Figure 3, the electronic device may include: a processor (processor) 310, a communications interface (Communications Interface) 320, a memory (memory) 330 and a communication bus 340. Among them, the processor 310, the communication interface 320, and the memory 330 complete communication with each other through the communication bus 340. The processor 310 can call the logical instructions in the memory 330 to execute the supply chain responsible subject identity authentication method. The method includes: generating a public-private key pair of the responsible subject according to the identity of the responsible subject and the user password, public-private key pair. The key pair includes the system master private key and the system master public key; generate a signature private key based on the system master private key and user identification; use the signature private key to digitally sign and encrypt the user data of the responsible subject to obtain signature data; use the identity identifier to sign Data is verified.

In addition, the above-mentioned logical instructions in the memory 330 can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product. Based on this understanding, the technical solution of the present invention essentially or the part that contributes to the existing technology or the part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including Several instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program code. .

On the other hand, embodiments of the present invention also provide a computer program product. The computer program product includes a computer program stored on a non-transitory computer-readable storage medium. The computer program includes program instructions. When the program instructions When executed by a computer, the computer can execute the supply chain responsible subject identity authentication method provided by the above method embodiments. The method includes: generating a public-private key pair of the responsible subject based on the responsible subject's identity and user password, and public-private key pair. The private key pair includes the system master private key and the system master public key; generate a signature private key based on the system master private key and user identification; use the signature private key to digitally sign and encrypt the user data of the responsible subject to obtain the signature data; use the identity identifier Verify signed data.

On the other hand, embodiments of the present invention also provide a non-transitory computer-readable storage medium on which a computer program is stored. The computer program is implemented when executed by a processor to perform the supply chain responsibility provided by the above embodiments. Subject identity authentication method, which method includes: generating a public-private key pair of the responsible subject based on the identity identifier and user password of the responsible subject. The public-private key pair includes the system master private key and the system master public key; Key and user identification are used to generate a signature private key; the signature private key is used to digitally sign and encrypt the user data of the responsible subject to obtain the signature data; the identity identification is used to verify the signature data.

The device embodiments described above are only illustrative. The units described as separate components may or may not be physically separated. The components shown as units may or may not be physical units, that is, they may be located in One location, or it can be distributed across multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the solution of this embodiment. Persons of ordinary skill in the art can understand and implement the method without any creative effort.

Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the part of the above technical solution that essentially contributes to the existing technology can be embodied in the form of a software product. The computer software product can be stored in a computer-readable storage medium, such as ROM/RAM, magnetic disk, optical disk, etc., including a number of instructions to cause a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in various embodiments or certain parts of the embodiments.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that it can still be used Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent substitutions are made to some of the technical features; however, these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims (8)

1. A supply chain responsibility subject identity authentication method, characterized by including: Generate the public-private key pair of the responsible subject based on the identity of the responsible subject and the user password, and the public-private key pair includes the system master private key and the system master public key; Generate a signature private key based on the system master private key and user identification; Use the signature private key to digitally sign and encrypt the user data of the responsible subject to obtain the signature data; Verify the signature data using the identity identifier; The use of the signature private key to digitally sign and encrypt the user data of the responsible subject and obtain the signature data includes: S31, calculate the element g in the group G _T about the user data, g=e(P ₁ ,P _pub-8 ); the element g represents the intermediate encryption result; e represents the double from the group G ₁ × G ₂ to the group G _T Linear pair, G ₁ and G ₂ represent the additive cyclic group, G _T is the multiplicative cyclic group, the groups G ₁ , G ₂ and G _T have the same order; P ₁ represents the generator of the group G ₁ , P _pub-8 Represents the system master private key; S32, generate a random number r, r∈[1,N-1]; r represents a random number selected within a predetermined range, and N represents the order of groups G ₁ , G ₂ and G _T ; S33, calculate the element w in the group G _T , w=g ^r , and convert the data type of w into a bit string; w represents the component of the ciphertext; S34, calculate the certificate h, h=H ₂ (M||w, N); h represents the certificate, H ₂ () represents the secure hash function, M represents the bit string corresponding to the user data, and the symbol || represents the associated operation relationship ; S35, calculate the certificate l , l =(rh)mod N; if l =0, return to step S32; if l ≠0, enter step S36; S36, calculate the element S in the group G ₁ , S=[ l ]ds _A ; ds _A represents the signature private key, [ l ] ds _A represents the dot multiplication operation of l and ds _A ; S37, obtain the signature data K, K=(h, S); The use of the identity identifier to verify the signature data includes: Assume that the signature data to be verified is represented by K’, K’=(h’, S’), and the bit string corresponding to the user data to be verified is represented by M’; S41, check whether h´∈[1,N-1] is established; if it is not established, the verification fails; if it is established, step S42 is executed; S42, convert the data type of S´ into a point on the elliptic curve, and check whether S´∈G ₁ is true; if not, the verification fails; if true, step S43 is executed; S43, calculate the element g in the group G _T , g=e(P ₁ ,P' _pub-8 ); P' _pub-8 represents the system master public key; S44, calculate the element t in the group G _T , t=g ^h ; S45, calculate certificate h ₁ , h ₁ =H ₁ (ID _A ||hid,N); ID _A represents the user's identity, hid represents the certificate id; H ₁ () represents a secure hash function; S46, calculate the element P in group G ₂ , P=[h ₁ ]P ₂ +P'_pub-s; P ₂ represents the generator of group G ₂ , and P' _pub-s represents the system master public key; S47, calculate the element u in the group G _T , u=e(S´, P); S48, calculate the element w' in the group G _T , w'=u·t, and convert the data type of w' into a bit string; u and t respectively represent the components of the system's master private key; S49, calculate the certificate h ₂ =H ₂ (M'||w', N) and check whether h ₂ =h' is established; if it is established, the verification passes; otherwise, the verification fails. 2. The supply chain responsible subject identity authentication method according to claim 1, characterized in that generating the public-private key pair of the responsible subject based on the identity identifier and user password of the responsible subject includes: The key generation center is used to perform a hash encryption on the identity of the responsible subject and the user password, generate the public-private key pair, and publish the system master public key to the blockchain for disclosure. 3. The supply chain responsible subject identity authentication method according to claim 1, characterized in that generating a signature private key based on the system master private key and user identification includes: The key generation center is used to perform secondary hash encryption on the system master private key and user identification to generate the signature private key. 4. The supply chain responsibility subject identity authentication method according to claim 1, characterized in that it further includes: Based on the national secret SM9 algorithm, the public-private key pair of the responsible subject is generated based on the identity of the responsible subject and the user password, and the signature private key is generated based on the system master private key and user identification. 5. The supply chain responsible subject identity authentication method according to claim 1, characterized in that the user identification is: an identification constructed from a file including company name, social unified credit code, address, and legal representative information. 6. A supply chain responsible subject identity authentication system, characterized by including: a public-private key generation unit, a signature private key generation unit, an encryption unit and a verification unit; The public-private key generation unit is used to generate a public-private key pair of the responsible subject based on the identity of the responsible subject and the user password. The public-private key pair includes the system master private key and the system master public key. key; The signature private key generation unit is used to generate a signature private key based on the system master private key and user identification; The encryption unit is used to digitally sign and encrypt the user data of the responsible subject using the signature private key to obtain the signature data; The verification unit is used to verify the signature data using the identity identifier; Wherein, the use of the signature private key to digitally sign and encrypt the user data of the responsible subject and obtain the signature data includes: S31, calculate the element g in the group G _T about the user data, g=e(P ₁ ,P _pub-8 ); the element g represents the intermediate encryption result; e represents the double from the group G ₁ × G ₂ to the group G _T Linear pair, G ₁ and G ₂ represent the additive cyclic group, G _T is the multiplicative cyclic group, the groups G ₁ , G ₂ and G _T have the same order; P ₁ represents the generator of the group G ₁ , P _pub-8 Represents the system master private key; S32, generate a random number r, r∈[1,N-1]; r represents a random number selected within a predetermined range, and N represents the order of groups G ₁ , G ₂ and G _T ; S33, calculate the element w in the group G _T , w=g ^r , and convert the data type of w into a bit string; w represents the component of the ciphertext; S34, calculate the certificate h, h=H ₂ (M||w, N); h represents the certificate, H ₂ () represents the secure hash function, M represents the bit string corresponding to the user data, and the symbol || represents the associated operation relationship ; S35, calculate the certificate l , l =(rh)mod N; if l =0, return to step S32; if l ≠0, enter step S36; S36, calculate the element S in the group G ₁ , S=[ l ]ds _A ; ds _A represents the signature private key, [ l ] ds _A represents the dot multiplication operation of l and ds _A ; S37, obtain the signature data K, K=(h, S); The use of the identity identifier to verify the signature data includes: Assume that the signature data to be verified is represented by K’, K’=(h’, S’), and the bit string corresponding to the user data to be verified is represented by M’; S41, check whether h´∈[1,N-1] is established; if it is not established, the verification fails; if it is established, step S42 is executed; S42, convert the data type of S´ into a point on the elliptic curve, and check whether S´∈G ₁ is true; if not, the verification fails; if true, step S43 is executed; S43, calculate the element g in the group G _T , g=e(P ₁ ,P' _pub-8 ); P' _pub-8 represents the system master public key; S44, calculate the element t in the group G _T , t=g ^h ; S45, calculate certificate h ₁ , h ₁ =H ₁ (ID _A ||hid,N); ID _A represents the user's identity, hid represents the certificate id; H ₁ () represents a secure hash function; S46, calculate the element P in group G ₂ , P=[h ₁ ]P ₂ +P'_pub-s; P ₂ represents the generator of group G ₂ , and P' _pub-s represents the system master public key; S47, calculate the element u in the group G _T , u=e(S´, P); S48, calculate the element w' in the group G _T , w'=u·t, and convert the data type of w' into a bit string; u and t respectively represent the components of the system's master private key; S49, calculate the certificate h ₂ =H ₂ (M'||w', N) and check whether h ₂ =h' is established; if it is established, the verification passes; otherwise, the verification fails. 7. An electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that when the processor executes the program, it implements any one of claims 1 to 5 The steps of the supply chain responsibility subject identity authentication method described in the item. 8. A computer-readable storage medium with a computer program stored thereon, characterized in that when the computer program is executed by a processor, the steps of the supply chain responsible subject identity authentication method according to any one of claims 1 to 5 are implemented. .