KR20230071415A - Method for generating user's public key certificate in hierarchical structure, method for selecting electronic signature algorithm for authentication, and appatarus capable of performing the method - Google Patents

Abstract

A method of generating a public key certificate is disclosed. The method selects one of the electronic signature programs belonging to the second group, which is safe from a decryption attack using a quantum computer, as an electronic signature program to be used by a responsible certification authority, and the electronic signature programs belonging to the second group and the two Any one of electronic signature programs belonging to the first group that is not safe from a computer-based decryption attack may be selected as an electronic signature program to be used by the object. In addition, the method of operating the electronic signature system based on personal identification information can select one of the electronic signature programs to be used by the certification authority in charge and the electronic signature programs to be used by the object, each of which is safe for decryption attacks using quantum computers, , the electronic signature program to be used by the responsible certification authority and the electronic signature program to be used by the object may be the same or different.

Description

A method for generating a user public key certificate in a hierarchical structure, a method for selecting an electronic signature algorithm for authentication, and an apparatus capable of performing the method APPATARUS CAPABLE OF PERFORMING THE METHOD}

An embodiment according to the concept of the present invention relates to a method for generating a user private key certificate, in particular, a method for generating a user public key certificate in a hierarchical structure between a certification authority and a user, a method for selecting a digital signature algorithm for authentication, and a method for performing the method. It relates to an apparatus capable of performing the method, and a computer program for performing the method.

An electronic signature refers to information in an electronic form attached to or logically combined with a specific electronic document to be used for verifying a signer and indicating that the signer has signed the corresponding electronic document.

The sender digitally signs the message using a digital signature algorithm, and the electronic signature is verified by the digital signature verification algorithm of the receiver.

In the RSA encryption and decryption structure, when encryption/decryption is performed in an asymmetric key structure, confidentiality is provided by encrypting a message with a receiver's public key and decrypting the message with a sender's private key. In the RSA digital signature structure, since a sender generates a digital signature value for a message with its own private key and a receiver verifies the message with the sender's public key, authentication and non-repudiation functions are provided.

Registered Patent Publication: Registration No. 10-0431210 (Announced on May 12, 2004) Registered Patent Publication: Registration No. 10-1825320 (2018.03.22. Notice) Registered Patent Publication: Registration No. 10-1863953 (2018.06.29. Notice) Publication of Patent Publication: Publication No. 2001-0047385 (published on June 15, 2001)

A technical problem to be achieved by the present invention is that when a responsible certification authority and an object are included in a hierarchical structure, one of the electronic signature programs belonging to the second group that is safe from a cryptographic attack using a quantum computer is used by the responsible certification authority. A signature program is selected, and any one of electronic signature programs belonging to the second group and electronic signature programs belonging to the first group that are not secure against decryption attacks using the quantum computer is selected as the electronic signature program to be used by the object. It is to provide a selectable method, a computer program for performing the method, and an apparatus for performing the method.

A technical problem to be achieved by the present invention is to select an electronic signature program to be used by a responsible certification authority and an electronic signature program to be used by an object from digital signature programs that are safe for decryption attacks using quantum computers, and to be used by the responsible certification authority. An electronic signature program and an electronic signature program to be used by the object are provided to provide a method for selecting the same or different electronic signature programs, a computer program for performing the method, and a device for performing the method.

In the method of generating an object public key certificate according to an embodiment of the present invention, a certification authority electronic signature program running on a computer of a certification authority discloses identification information of the object and disclosure of the object from an object electronic signature program running on a computer of the object. Receiving a key; Generating, by the certification authority digital signature program, an electronic signature of the certification authority for the identification information and the public key; and generating an object public key certificate including the electronic signature.

According to embodiments, the certification authority electronic signature program is any one of electronic signature programs included in the second group that is safe from decryption attacks using quantum computers, and the object electronic signature program is a decryption attack using quantum computers. is any one of the electronic signature programs included in the first unsafe group.

According to embodiments, the electronic signature programs include electronic signature programs included in the second group that are safe from decryption attacks using quantum computers and electronic signature programs included in the first group that are not safe from decryption attacks using quantum computers. , the certification authority electronic signature program is a first electronic signature program among the electronic signature programs included in the second group, and the object electronic signature program is the first electronic signature program.

According to embodiments, the electronic signature programs include electronic signature programs included in the second group that are safe from decryption attacks using quantum computers and electronic signature programs included in the first group that are not safe from decryption attacks using quantum computers. , the certification authority electronic signature program is a first electronic signature program among the electronic signature programs included in the second group, and the object electronic signature program is the first among electronic signature programs included in the second group. 2Electronic signature program.

According to embodiments, a computer program for performing a method of generating an object public key certificate is stored in a storage medium.

According to embodiments, a computer includes a storage medium for storing a computer program for performing a method of generating an object public key certificate, and a processor for executing the computer program stored in the storage medium.

According to embodiments, a method for providing a service for generating an object public key certificate using a computer of a certification authority and a computer of an object includes generating a public key of the object by an object electronic signature program running on the computer of the object, Transmitting the identification information of the object and the public key of the object to a computer of the certification authority, and a certification authority digital signature program running in the certification authority is digitally signed by the certification authority for the identification information and the public key. and generating, by the certification authority digital signature program, the object public key certificate including the identification information, the public key, and the digital signature.

According to embodiments, a method of operating an electronic signature system based on personal identification information includes generating a pair of a KGC public key and a KGC private key by a KGC electronic signature program of a key generation center, and a first user electronic signature of a first user computer Receiving first user identity information by a program; Generating, by the KGC electronic signature program, a pair of a first user public key and a first user private key using the first user identity information; generating a KGC digital signature for the first user identity information and the first user public key using the first user private key; Generating a first user full private key including a pair of user private keys and the KGC digital signature, wherein the KGC electronic signature program transmits the first user full private key through a secure channel Including sending to

According to embodiments, the KGC electronic signature program is one of electronic signature programs that are safe against decryption attacks using quantum computers, and the KGC electronic signature program and the first user electronic signature program are the same electronic signature program.

According to embodiments, the key generation electronic signature program is any one of electronic signature programs that are safe from decryption attacks using quantum computers, and the first user electronic signature program is an electronic signature that is safe from decryption attacks using quantum computers. one of the programs.

A method for generating a public key certificate and a computer program for performing the method according to an embodiment of the present invention include digital signature programs belonging to the second group that are safe from decryption attacks using quantum computers for the digital signature program to be used by the certification authority in charge. Select one from among the digital signature programs to be used by the object, select one of the digital signature programs belonging to the second group and the digital signature programs belonging to the first group that are not secure against decryption attacks using the quantum computer. Since all digital signature programs are selected from the second group, the present invention has a safe effect against decryption attacks.

A method of operating an electronic signature system based on personal identification information according to an embodiment of the present invention and a computer program performing the method are a decryption attack using a quantum computer for each of the electronic signature program to be used by the responsible certification authority and the electronic signature program to be used by the object. Any one of safe electronic signature programs may be selected, and the electronic signature program to be used by the responsible certification authority and the electronic signature program to be used by the object may be the same or different. The present invention has a safe effect against decryption attacks.

A detailed description of each drawing is provided in order to more fully understand the drawings cited in the detailed description of the present invention.
1 is a block diagram of a public key certificate management system that has a hierarchical structure and selects an electronic signature program and generates a user public key certificate according to embodiments of the present invention.
FIG. 2 shows types of digital signature programs used in the public key certificate management system of FIG. 1 .
FIG. 3 shows the structure of each electronic signature program shown in FIG. 2 or FIG. 6 .
4 is a flowchart illustrating a process of storing a user public key certificate generated in the public key certificate management system of FIG. 1 in an object.
5 is a flowchart illustrating a process of storing a user public key certificate generated in the public key certificate management system of FIG. 1 in a cloud storage.
6 is a block diagram of a system for performing a method of selecting a public key-based electronic signature program for designing a personal identification information-based electronic signature program according to embodiments of the present invention.

1 is a block diagram of a public key certificate management system that has a hierarchical structure and selects an electronic signature program and generates a user public key certificate according to embodiments of the present invention.

Referring to FIG. 1, the public key certificate management system 100 includes a root certification authority 110, a plurality of certification authorities 130-1 to 130-3, and a plurality of user computers 151-1 to 151- X, 161-1 to 161-Y, and 171-1 to 171-Z). Here, each of X, Y, and Z is a natural number of 2 or greater. According to embodiments, the public key certificate management system 100 is a cloud storage device that receives and stores a user's public key certificate generated by a corresponding certification authority (110, 130-1, 130-2, or 130-3) (180) may be further included.

The electronic signatures described herein are also referred to as digital signatures.

The electronic signature program (also referred to as a 'computer program') described in this specification is combined with hardware (eg, a processor) and a computer (eg, processor)-readable storage medium (eg, storage medium). device) and executed by the computer.

In this specification, the first electronic signature program installed in the first computer exchanges information (also referred to as a signal or data) with the second electronic signature program installed in the second computer, which means that the first electronic signature program is connected to a communication network. It means exchanging information with the second electronic signature program through the communication device of the first computer and the communication device of the second computer connected to each other through (eg, a wireless communication network or a wired communication network).

Each of the root (or higher) certification authority 110 and the plurality of certification authorities 130-1 to 130-3 means a computer or server (also referred to as a 'data processing device').

The root certification authority 110 communicates with the processor 112 executing the electronic signature program 114 and the corresponding device 130-1, 130-2, 130-3, or 180 to exchange information through a communication network. device 116.

The first certification authority 130-1 includes a processor 132-1 executing the electronic signature program 134-1, a storage device 136-1, and corresponding devices 110, 151-1 to 151-X, and/or a communication device 138-1 that exchanges information with 180 through a communication network.

The second authentication authority 130-2 includes a processor 132-2 executing the electronic signature program 134-2, a storage device 136-2, and corresponding devices 110, 161-1 to 161-Y, and/or a communication device 138-2 that exchanges information with 180 through a communication network.

The third authentication authority 130-3 includes a processor 132-3 executing the electronic signature program 134-3, a storage device 136-3, and corresponding devices 110, 171-1 to 171-Z, and/or a communication device 138-3 that exchanges information with 180 through a communication network.

Each of the plurality of user computers 151-1 to 151-X, 161-1 to 161-Y, and 171-1 to 171-Z may be a PC or a mobile device, examples of which include a laptop computer , smart phones, mobile internet devices (MID) or Internet of Things (IoT) devices, and the like.

The user computer 151-1 transmits information through a processor 153-1 executing the electronic signature program 155-1, a storage device 157-1, and a first authentication authority 130-1 through a communication network. and a communication device 159-1 for sending and receiving. It is assumed that the structure and operation of each user computer 151-2 to 151-X that exchanges information with the first authentication authority 130-1 through the communication network is the same as that of the user computer 151-1. do.

The user computer 161-1 transmits information through a processor 163-1 executing the digital signature program 165-1, a storage device 167-1, and a second authentication authority 130-2 through a communication network. and a communication device 169-1 for sending and receiving. It is assumed that the structure and operation of each user computer (161-2 to 161-Y) that exchanges information with the second authentication authority 130-2 through the communication network is the same as that of the user computer 161-1. do.

The user computer 171-1 transmits information through a processor 173-1 executing an electronic signature program 175-1, a storage device 177-1, and a third authentication authority 130-3 through a communication network. and a communication device 179-1 for sending and receiving. It is assumed that the structure and operation of each user computer (171-2 to 171-Z) that exchanges information with the third authentication authority (130-3) through the communication network is the same as that of the user computer (171-1). do.

The communication network may be a wired communication network or a wireless communication network, and each of the storage devices 136-1, 136-2, 136-3, 159-1, 169-1, and 179-1 may be a memory device, A general term for volatile memory devices and non-volatile memory devices.

1, a root certification authority 110, a plurality of certification authorities 130-1 to 130-3, and a plurality of user computers 151-1 to 151-X, 161-1 to 161- Y, and 171-1 to 171-Z) have a hierarchy.

The root certification authority 110 refers to an authority that issues and manages electronic identity certificates for each of the certification authorities 130-1 to 130-3, and the first certification authority 130-1 is a user computer 151 -1 to 151-X) refers to an organization that issues and manages electronic identity certificates for each, and the second authentication authority 130-2 is an electronic identity for each of the user computers 161-1 to 161-Y This refers to an institution that issues and manages certificates, and the third authentication authority 130-3 refers to an institution that issues and manages electronic identification certificates for each of the user computers 171-1 to 171-Z. According to embodiments, an electronic identity certificate may refer to a public key certificate that guarantees the validity of a public key, but is not limited thereto.

The root certification authority 110 guarantees the validity of the public key of each of the certification authorities 130-1 to 130-3, and the first certification authority 130-1 is used by each user computer 151-1 to 151-X. ), and the second authentication authority 130-2 guarantees the validity of the user's public key using each user's computer 161-1 to 161-Y. 3 The certification authority 130-3 guarantees the validity of the public key of the user using each user computer 171-1 to 171-Z. Here, ensuring the validity of the public key means generating a public key certificate, but is not limited thereto.

According to embodiments, when an object is a user (or user computer), a certification authority that issues and manages an electronic identity certificate for the user (or user computer) is referred to as a responsible certification authority, and when the object is a certification authority, the authentication An upper certification authority (or root certification authority) that issues and manages electronic identity certificates for an authority is called a responsible certification authority. The responsible certification authority may operate the cloud storage device 180 .

The certification authority computer program refers to a computer program executed on a computer of a responsible certification authority, and the object computer program refers to a computer program executed on a computer of an object.

FIG. 2 shows types of digital signature programs used in the public key certificate management system of FIG. 1 .

In the present specification, an electronic signature program that is safe from a cryptanalytic attack using a quantum computer is an electronic signature algorithm that is safe from a cryptanalytic attack using the quantum computer ('cryptography' or 'post quantum cryptography'). Also referred to as 'Quantum Cryptography (PQC)'), it means a computer program that uses (or executes), and an electronic signature program that is not safe for a decryption attack using the quantum computer is not safe for a decryption attack using the quantum computer. A computer program that uses (or executes) a digital signature algorithm that is not known.

As shown in FIG. 2 , the electronic signature programs 200 are classified into a first group 210 and a second group 220 .

The first group 210 refers to a set of electronic signature programs 211 to 215 that are not safe from a cryptographic attack using a quantum computer, and the second group 220 is safe from a cryptographic attack using a quantum computer. It means a set of electronic signature programs 221 to 229.

Examples of electronic signature programs belonging to the first group 210 include the electronic signature program 211 that performs an integer factorization problem-based digital signature algorithm, and a discrete logarithm problem-based digital signature algorithm. It includes, but is not limited to, an electronic signature program 213 that performs a digital signature program 213, and a computer program 215 that performs an electronic signature algorithm based on an elliptic-curve discrete logarithm problem.

Examples of electronic signature programs belonging to the second group 220 include a computer program 221 performing a lattice-based electronic signature algorithm and a computer program 223 performing a code-based electronic signature algorithm. ), a computer program 225 that performs a multivariate quadratic-based electronic signature algorithm, a computer program 227 that performs an Isogeny-based digital signature algorithm, and a hash-based ), but is not limited thereto.

A lattice-based digital signature algorithm is a digital signature algorithm based on the difficulty of the problem of finding the shortest vector on a lattice. Types of lattices include standard lattices, ideal lattices, module lattices, etc. Examples of types of problems include learning with errors (LWE), short integer solutions (Short integer solution (SIS)), Ring-LWE (Ring-LWE), and Module-LWE (Module-LWE), and the like.

The code-based electronic signature algorithm is an electronic signature algorithm based on the difficulty of decoding a general linear code, and includes a syndrome decoding problem and the like. Examples of code-based digital signature algorithms include McEliece, Modern McEliece, Niederreiter, MCPC-McEliece, Wild McEliece, McBits, and the like.

A multivariate-based electronic signature algorithm is an electronic signature algorithm based on the difficulty of solving a problem of a multivariate quadratic system defined on a finite field or a Galois field.

An isogeny-based digital signature algorithm is an electronic signature algorithm based on the difficulty of obtaining an isogeny existing between two elliptic curves.

Hash-based Digital Signature Algorithm It is a digital signature algorithm based on the difficulty of finding a collision pair or second preimage of a hash function.

Therefore, the electronic signature program 114 installed in the root certification authority 110 is any one of the electronic signature programs 221 to 229 belonging to the second group 210, and each certification authority 130-1, 130-2 The electronic signature programs 134-1, 134-2, and 134-3 installed in the , and 130-3 are any one of the electronic signature programs 221 to 229 belonging to the second group 220, and each user computer The electronic signature programs installed in (151-1 to 151-X, 161-1 to 161-Y, and 171-1 to 171-Z) are electronic signature programs (211 to 215) belonging to the first group (210) and It is any one of the electronic signature programs 221 to 229 belonging to the second group 210.

FIG. 3 shows the structure of each electronic signature program shown in FIG. 2 or FIG. 6 . The electronic signature program 230 of FIG. 3, which collectively refers to the electronic signature programs 211, 213, 215, 221, 223, 225, 227, and 229 described with reference to FIG. 2, is a key generation program that performs a key generation algorithm. (eg, set of instructions; 231), a signature generation program that performs a signature generation algorithm (eg, set of instructions; 233), and a verification program that performs a verification algorithm (eg, set of instructions; 235).

The key generation algorithm generates a user's key pair, and the key pair includes a public key and a private key.

The signature generation algorithm generates an electronic signature using the user's private key.

A verification algorithm (or signature verification algorithm) verifies the electronic signature using the digital signature, the message, and the user's public key.

4 is a flowchart illustrating a process of storing a public key certificate generated in the public key certificate management system of FIG. 1 in an object.

User computer (151-1 or user of user computer 151-1), first certification authority (130-1 or administrator of first certification authority 130-1), root certification authority (110 or root certification authority) At least one of the administrator of (110) and the system engineer of the public key certificate management system (100) may be a selection subject for selecting the corresponding electronic signature program.

First, assuming that the object is the user computer 151-1 and the responsible certification authority is the first certification authority 130-1, a process of generating and managing a user certificate public key will be described with reference to FIGS. 1 to 4 do.

The first certification authority 130-1 selects the digital signature program (SS_CCA) to be used (S110), and the user of the first certification authority 130-1 or the user computer 151-1 uses the user computer 151 -1) can select the electronic signature program (SS_OU) to be used (S112).

A method of selecting an electronic signature program (SS_OU) to be used in the user computer 151-1 is as follows.

First, the first certification authority 130-1 selects one of the electronic signature programs 221 to 229 included in the second group 220 as an electronic signature program to be used. Each of the root certification authority 110 and certification authorities 130-1, 130-2, and 130-3 always selects one of the electronic signature programs 221 to 229 included in the second group 220. do.

The first certification authority 130-1 selects one of the electronic signature programs 211, 213, and 215 included in the first group 210, and the selected electronic signature program 211, 213, or 215 is transmitted to the user computer 151-1, the selected electronic signature program 211, 213, or 215 is installed in the user computer 151-1.

Second, the first authentication authority 130-1 selects one of the electronic signature programs 221 to 229 included in the second group 220 as an electronic signature program to be used by the first authentication authority 130-1, and selects one of the electronic signature programs 220 ) and transmits the electronic signature programs 221 to 229 included in the user computer 151-1, and the user of the user computer 151-1 sends the electronic signature programs 221, 223, 225, 227, and 229 ), the selected electronic signature program 221, 223, 225, 227, or 229 is installed in the user computer 151-1.

According to an embodiment, the root certification authority 110 and each certification authority 130-1 to 130-3 select a corresponding digital signature program from the second group 220, and each user selects the first group 210 or A corresponding electronic signature program can be selected from the second group 220 .

Methods for selecting electronic signature programs are as illustrated below.

1. Method 1

In the first method, the selection subject selects the electronic signature program 134-1 to be used by the first certification authority 130-1 from the second group 220, and the electronic signature program to be used in the user computer 151-1 ( 155-1) is selected from the first group 210.

1) The selection subject selects the electronic signature program 134-1 to be used by the first certification authority 130-1 as the computer program 221 that performs the lattice-based electronic signature algorithm, and the selection subject selects the user computer 151-1 1) an electronic signature program 211 that performs a prime factorization problem-based algorithm (eg, RSA (Rivest Shamir Adleman) algorithm) on the electronic signature program 155-1 to be used, or an elliptic curve discrete logarithm problem-based algorithm (eg For example, selected as a computer program 215 that performs ECDSA (Elliptic Curve Digital Signature Algorithm),

2) The selection subject selects the electronic signature program 134-1 to be used by the first certification authority 130-1 as the computer program 229 that performs the hash-based electronic signature algorithm, and the selection subject selects the user computer 151-1 1) an electronic signature program 211 that performs a prime factorization problem-based algorithm (eg, RSA algorithm) on the electronic signature program 155-1 to be used or an elliptic curve discrete logarithm problem-based algorithm (eg, ECDSA) Selected as a computer program 215 that performs,

3) The selection subject selects the electronic signature program 134-1 to be used by the first certification authority 130-1 as the computer program 225 that performs the multi-variable based electronic signature algorithm, and the selection subject selects the user computer 151 -1) The electronic signature program 211 that performs the prime factorization problem-based algorithm (eg, RSA algorithm) on the electronic signature program 155-1 to be used or the elliptic curve discrete logarithm problem-based algorithm (eg, ECDSA ) selected as the computer program 215 that performs,

4) The selection subject always selects one of the electronic signature programs 221 to 229 included in the second group 220 as the electronic signature program 114 to be used by the root certification authority 110, but the first certification authority Select the same electronic signature program as the electronic signature program (134-1) to be used in (130-1) or select an electronic signature program different from the electronic signature program (134-1) to be used in the first certification authority (130-1). .

2. Method 2

In the second method, the selection subject selects the electronic signature program 134-1 to be used in the first certification authority 130-1 from the second group 210, and the electronic signature program to be used in the user computer 151-1 ( 155-1) is selected from the second group 220. In this method, the electronic signature program to be used in the first authentication authority 130-1 and the user computer 151-1 is the same electronic signature program.

1) The selection subject sets both the electronic signature program 134-1 to be used in the first certification authority 130-1 and the electronic signature program 155-1 to be used in the user computer 151-1 by using a lattice-based digital signature algorithm. Selected as a computer program 221 to perform,

2) The selection subject hash-based both the electronic signature program 134-1 to be used in the first certification authority 130-1 and the electronic signature program 155-1 to be used in the user computer 151-1. ) selected as a computer program 229 that performs an electronic signature algorithm,

3) A computer program 225 that performs a multi-variable based electronic signature algorithm on both of the electronic signature programs 114 and 134-1 to be used by the selected subject in the root certification authority 110 and the first certification authority 130-1, respectively. select by.

3. Method 3

In the third method, the selection subject selects the electronic signature program 134-1 to be used in the first certification authority 130-1 from the second group 210, and the electronic signature program to be used in the user computer 151-1 ( 155-1) is selected from the second group 220. In this method, the electronic signature programs to be used in the first certification authority 130-1 and the user computer 151-1 are different electronic signature programs.

1) The selection subject selects the electronic signature program 134-1 to be used by the first certification authority 130-1 as the computer program 225 that performs the multivariate-based electronic signature algorithm, and the selection subject selects the user computer 151 -1) Select the electronic signature program 155-1 to be used as the computer program 221 that performs the lattice-based electronic signature algorithm,

2) The selection subject selects the electronic signature program 134-1 to be used by the first certification authority 130-1 as a computer program 229 that performs a hash-based electronic signature algorithm, and the selection subject Selecting the electronic signature program 155-1 to be used in the user computer 151-1 as the computer program 221 that performs the lattice-based electronic signature algorithm,

3) The selection subject selects the electronic signature program 114 to be used by the root certification authority 110 as the computer program 225 that performs the multivariate-based electronic signature algorithm, and the selection subject selects the first certification authority 130-1 and selecting the electronic signature programs 134-1 and 155-1 to be used in each of the user computers 151-1 as the computer program 221 that performs the lattice-based electronic signature algorithm,

4) A computer program (221-1) that performs a lattice-based electronic signature algorithm using the first type (eg, standard lattice) of the electronic signature program (134-1) to be used by the first authentication authority (110) by the selection entity ), and a computer program for performing a lattice-based electronic signature algorithm using a third type (eg, module lattice) for the electronic signature program 155-1 to be used in the user computer 151-1 by the selection subject ( 221-3).

The electronic signature program 155-1 installed in the user computer 151-1 generates the user's public key (OPK) using the key generation algorithm of the electronic signature program 155-1 (S114). At this time, the user's public key (OPK) and private key are generated as a pair.

The electronic signature program 155-1 generates identification information (OID) capable of uniquely identifying the user computer (151-1 or the user of the user computer 151-1) and the user's public key (OPK). A message (M(OID, OPK)) is generated and transmitted to the first authentication authority 130-1 through the communication device (S116).

The electronic signature program 134-1 installed in the first certification authority 130-1 uses the signature generation algorithm of the electronic signature program 134-1 to generate information about the user's identification information (OID) and public key (OPK). An electronic signature (Sig_CCA (OID, OPK)) of the first certification authority 130-1 is generated (S118). For example, the electronic signature program 134-1 digitally signs the identification information (OID) and the public key (OPK) with the secret key of the first certification authority 130-1 to obtain an electronic signature (Sig_CCA (OID, OPK) ) is generated (S118).

The signature generation algorithm of the digital signature program 134-1 generates the user's public key certificate (Cert_OU) including identification information (OID), the user's public key (OPK), and the digital signature (Sig_CCA (OID, OPK)). It is generated (S210), and the public key certificate (Cert_OU) is transmitted to the user computer (151-1) (S122-1). The electronic signature program 155-1 receives the public key certificate (Cert_OU) and stores it in the storage device 157-1 (S124-1).

Assuming that the object is the first certification authority 130-1 and the responsible certification authority is the root certification authority 110, a process of generating and managing a certificate public key of the first certification authority 130-1 is illustrated in FIGS. It is explained with reference to 4.

The root certification authority 110 selects the digital signature program (SS_CCA) to be used (S110), and the manager of the root certification authority 110 or the first certification authority 130-1 selects the first certification authority 130-1. ) selects an electronic signature program (SS_OU) to be used (S112).

The digital signature program 134-1 installed in the first certification authority 130-1 generates the public key (OPK) of the first certification authority 130-1 by using the key generation algorithm of the digital signature program 134-1. is generated (S114). At this time, the public key (OPK) and the private key of the first certification authority 130-1 are generated as a pair.

The electronic signature program 134-1 is the first authentication authority 130-1 or the identification information (OID) of the manager of the first certification authority 130-1 and the public key of the first authentication authority 130-1 ( A message (M(OID, OPK)) including OPK is generated and transmitted to the root certification authority 110 through the communication device (S116).

The digital signature program 114 installed in the root certification authority 110 generates identification information (OID) and public key (OPK) of the first certification authority 130-1 using the signature generation algorithm of the digital signature program 114. An electronic signature (Sig_CCA (OID, OPK)) of the root certification authority 110 for is generated (S118). For example, the electronic signature program 114 digitally signs identification information (OID) and public key (OPK) with the private key of the root certification authority 110 to generate an electronic signature (Sig_CCA (OID, OPK)). (S118).

The signature generation algorithm of the digital signature program 114 is first authentication including identification information (OID), a public key (OPK) of the first certification authority (130-1), and a digital signature (Sig_CCA (OID, OPK)). A public key certificate (Cert_OU) of the authority 130-1 is generated (S210), and the public key certificate (Cert_OU) is transmitted to the first certification authority 130-1 (S122-1). The electronic signature program 134-1 receives the public key certificate (Cert_OU) and stores it in the storage device 136-1 (S124-1).

5 is a flowchart illustrating a process of storing a public key certificate generated in the public key certificate management system of FIG. 1 in a cloud storage.

Referring to FIG. 4 , the public key certificate (Cert_OU) of the object generated by the responsible certification authority 130-1 or 110 is stored in the object 151-1 or 130-1, but in FIG. 5, the responsible certification authority 130 The public key certificate (Cert_OU) of the object generated in -1 or 110) is stored in the cloud storage device 180, not stored in the object 151-1 or 130-1.

1 to 5, the signature generation algorithm of the electronic signature program 114 or 134-1 includes identification information (OID), object public key (OPK), and electronic signature (Sig_CCA (OID, OPK)). A public key certificate (Cert_OU) of the object to be generated (S120), and the public key certificate (Cert_OU) is transmitted to the cloud storage device 180 (S122-2). The cloud storage device 180 receives the object's public key certificate (Cert_OU) and stores it therein (S124-2).

The operation method between the root certification authority 110 and each certification authority 130-2 and 130-3 is the same as that between the root certification authority 110 and the first certification authority 130-1, and each authentication The operating method between the institutions 130-2 and 130-3 and each user computer (161-1 to 161-Y and 171-1 to 171-Z) is the first institution 130-1 and each user computer ( 151-1 to 151-X) are the same, so a detailed description thereof will be omitted.

6 is a block diagram of a system for performing a method of selecting a public key-based electronic signature program for designing a personal identification information-based electronic signature program according to embodiments of the present invention.

Referring to FIGS. 2 and 6 , two public key-based electronic signature algorithms are required to design an identity information-based electronic signature scheme according to an embodiment of the present invention. The two public key-based electronic signature algorithms include an electronic signature algorithm to be used by a Key Generation Center (hereinafter referred to as 'KGC') and an electronic signature algorithm to be used by a user. The present invention is a method for selecting two public key based digital signature algorithms.

The system 300 includes a KGC 310, a first user computer 330-1, and a second user computer 330-2. The KGC 310 may be a computer or a server (also referred to as a 'data processing device').

The KGC 310 includes a processor 312 that executes the electronic signature program 314 and a communication device that exchanges information with each user computer 330-1 and 330-2.

The first user computer 330-1 establishes a communication network with a processor 332-1 executing an electronic signature program 334-1, a storage device 336-1, and corresponding devices 310 and 330-2. It includes a communication device for exchanging information through.

The second user computer 330-2 establishes a processor 332-2 executing the electronic signature program 334-2, a storage device 336-2, and a communication network with the corresponding devices 310 and 330-1. It includes a communication device for exchanging information through.

1. Use the same electronic signature program included in the 2nd group

Both the electronic signature program 314 to be used in the KGC 310 and the electronic signature programs 334-1 and 334-2 to be used in the respective user computers 330-1 and 330-2 are the second group 220 of FIG. Any one of the electronic signature programs 221 to 229 included in is selected. That is, all of the objects 310, 330-1, and 330-2 use the same electronic signature program.

For example, both the electronic signature program 314 to be used in the KGC 310 and the electronic signature programs 334-1 and 334-2 to be used in the respective user computers 330-1 and 330-2 are the second group 220 ), but may be a computer program 221 performing a lattice-based electronic signature algorithm or a computer program 225 performing a multivariate-based electronic signature algorithm, but is not limited thereto.

2. Using different electronic signature programs included in the second group

Both the electronic signature program 314 to be used in the KGC 310 and the electronic signature programs 334-1 and 334-2 to be used in the respective user computers 330-1 and 330-2 are the second group 220 of FIG. , but each object 310, 330-1, and 330-2 uses a different electronic signature program.

In this method, two electronic signature algorithms can be selected to meet efficiency requirements such as the digital signature length, signature generation speed, and / or signature verification speed of the digital signature algorithm based on personal identification information to be designed, so that each object 310, 330 -1, and 330-2) can be customized.

For example, as the electronic signature program 314 to be used in the KGC 310, a computer program 225 performing a multivariate-based electronic signature algorithm or a computer program 229 performing a hash-based electronic signature algorithm is selected, and each The computer program 221 that performs the lattice-based electronic signature algorithm is selected as the electronic signature programs 334-1 and 334-2 to be used in the user computers 330-1 and 330-2.

A method of designing an electronic signature algorithm based on personal identification information from two selected public key based electronic signature algorithms will be described with reference to FIGS. 2, 3, and 6.

Any one of the electronic signature programs 221 to 229 included in the second group 220 is selected as the electronic signature program 314 to be used in the KGC 310, and the electronic signature program included in the second group 220 It is assumed that one or the other of the above 221 to 229 is selected as the electronic signature programs 334-1 and 334-2 to be used in the respective user computers 330-1 and 330-2.

The key generation program that performs the key generation algorithm in the computer program 314 of the KGC 310 generates a pair ((PK_M, SK_M)) of a KGC public key (PK_M) and a KGC private key (SK_M) (S310).

When the key generation program of the computer program 314 receives the first user identity information (ID) from the computer program 334-1 of the first user computer 330-1 (S312), the computer program 314 The key generation program of ) generates a pair ((PK_U, SK_U)) of the first user public key (PK_U) and the first user private key (SK_U) using the first user identity information (ID) (S314).

The signature generation program that performs the signature generation algorithm in the computer program 314 of the KGC 310 electronically signs the first user identification information (ID) and the first user public key (PK_U) with the KGC private key (SK_M). A KGC electronic signature (Sig_KGC (ID, PK_U)) is generated (S316).

The signature generation program of the computer program 314 is a first user pool (including a pair of first user public key and first user private key ((PK_U, SK_U)) and a KGC electronic signature (Sig_KGC (ID, PK_U)) A full) secret key (FSK_U = (PK_U, SK_U, Sig_KGC (ID, PK_U)) is generated (S318), and this (FSK_U) is transmitted to the first user computer 330-1 through a secure channel (SECH) (S320) In cryptography, the secure channel (SECH) means data transmission means that is resistant to overhearing and tampering.

The computer program 334-1 of the first user computer 330-1 receives the first user pool secret key (FSK_U=(PK_U, SK_U, Sig_KGC(ID, PK_U))) and stores it in the storage device 336-1. stored safely in

When the message M is input to the computer program 334-1 (S322), the signature generation program that performs the signature generation algorithm in the computer program 334-1 uses the first user pool secret key (FSK_U=(PK_U, SK_U) , Sig_KGC (ID, PK_U)) to digitally sign the message (M), the first user identity information (ID), and the first user public key (PK_U) with the first user's private key (SK_U) included in the first user's private key (SK_U). A user digital signature (Sig_U (M, ID, PK_U)) is generated (S324).

The signature generation program of the computer program 334-1 includes a pair of a first user public key and a first user private key ((PK_U, SK_U)), a KGC digital signature (Sig_KGC(ID, PK_U)), and a first user electronic signature. Generates a first user transmission digital signature (Sig_IBS=(PK_U, Sig_KGC(ID, PK_U), Sig_U(M, ID, PK_U)) including a signature (Sig_U(M, ID, PK_U)), and identifies the first user Information (ID), message (M), and electronic signature transmitted by the first user (Sig_IBS=(PK_U, Sig_KGC(ID, PK_U), Sig_U(M, ID, PK_U)) to the second user computer 330-2 Transmit (S326).

The verification program performing the verification algorithm in the computer program 334-2 of the second user computer 330-2 acquires the KGC public key (PK_M) (S328). For example, the verification program of the computer program 334-2 may receive the KGC public key (PK_M) from the KGC 310.

The verification program of the computer program 334-2 verifies the KGC electronic signature (Sig_KGC(ID, PK_U)) using the KGC public key (PK_M) (S330). If it is determined that the KGC electronic signature (Sig_KGC(ID, PK_U)) is valid as a result of the verification, the verification program of the computer program 334-2 performs the next step (S332), and as a result of the verification, the KGC electronic signature (Sig_KGC(ID, PK_U)) ) is invalid, the verification program of the computer program 334-2 rejects the first user transmission electronic signature (Sig_IBS).

For example, the verification program uses the first user public key (PK_U), KGC digital signature (Sig_KGC (ID, PK_U)) and the first user's electronic signature (Sig_U (M, ID, PK_U)) may be extracted.

The verification program of the computer program 334-2 verifies the first user electronic signature (Sig_U (M, ID, PK_U)) using the KGC public key (PK_M) (S332). As a result of the verification, if it is determined that the first user's electronic signature (Sig_U(M, ID, PK_U)) is valid, the verification program of the computer program 334-2 approves the first user's electronic signature (Sig_U(M, ID, PK_U)). And, as a result of the verification, if it is determined that the first user electronic signature Sig_U(M, ID, PK_U) is not valid, the verification program of the computer program 334-2 rejects the first user transmission electronic signature Sig_IBS.

The public key-based electronic signature algorithm (or public key-based digital signature program) described in the system 100 described with reference to FIGS. 1 to 5 is a responsible certification authority (110, 130-1, 130-2) , or 130-3) to the public key of the object (30-1, 130-2, 130-3, 151-1 through 151-X, 161-1 through 161-Y, or 171-1 through 171-Z). It is a structure that authenticates by issuing a public key certificate (Cert_OU).

However, in the personal identification information-based electronic signature algorithm (or personal identification information-based electronic signature program) described in the system 300 described with reference to FIG. 6, the KGC 310 uses the KGC secret key (SK_M) to (330-1 or 330-2) generates a secret key for the user's identity information (ID), transmits it to the user computer (330-1 or 330-2) through a secure communication channel, and The computer program executed in 1 or 330-2) generates and verifies a digital signature (Sig_IBS) using personal identification information instead of using a public key certificate (Cert_OU).

Accordingly, the system 300 described with reference to FIG. 6 does not include the certification authorities 110, 130-1, 130-2, and 130-3 of FIG. 1 that guarantee the validity of public keys for users.

Although the present invention has been described with reference to the embodiments shown in the drawings, this is only exemplary, and those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. Therefore, the true technical protection scope of the present invention should be determined by the technical spirit of the attached claims.

100: system
110 Root Certification Authority
114, 134-1, 134-2, 134-3: electronic signature program
130-1, 130-2, 130-3: Certification Authority
151-1~151-X, 161-1~161-Y, 171-1~171-Z: User computer
300: system
310: key generation center
330-1: first user computer
330-2: Second user computer

Claims (22)

receiving identification information of the object and public key of the object from an object electronic signature program executed on the object's computer, by a certification authority digital signature program running on the computer of the certification authority;
generating, by the certification authority digital signature program, an electronic signature of the certification authority for the identification information and the public key; and
generating, by the certificate authority digital signature program, an object public key certificate including the identification information, the public key, and the digital signature. According to claim 1,
The certification authority electronic signature program is any one of the electronic signature programs included in the second group safe from decryption attacks using quantum computers,
The object electronic signature program is any one of the electronic signature programs included in the first group that is not safe from a decryption attack using the quantum computer. Method for generating an object public key certificate. According to claim 1,
The certification authority electronic signature program is a first electronic signature program among electronic signature programs that are safe against decryption attacks using quantum computers,
The object electronic signature program generates an object public key certificate that is the first electronic signature program. According to claim 1,
The certification authority electronic signature program is a first electronic signature program among electronic signature programs that are safe against decryption attacks using quantum computers,
The object electronic signature program is a method of generating an object public key certificate that is a second electronic signature program among the electronic signature programs. According to claim 1,
The object is a user authentication authority that generates a user public key certificate for a user public key generated on a user computer,
The certification authority is a root certification authority that generates a certification authority public key certificate for the certification authority public key generated by the user certification authority,
The root certification authority, the user certification authority, and the user computer generate an object public key certificate having a hierarchical structure. According to claim 1,
The certification authority electronic signature program is any one of electronic signature programs included in the second group,
The object electronic signature program is any one of electronic signature programs included in the second group and electronic signature programs included in the first group,
The electronic signature programs included in the second group include a computer program performing a lattice-based electronic signature algorithm, a computer program performing a code-based electronic signature algorithm, a computer program performing a multivariate-based electronic signature algorithm, and an isogeny-based electronic signature. At least two of a computer program that performs an algorithm, and a computer program that performs a hash-based digital signature algorithm;
The electronic signature programs included in the first group are at least one of a digital signature program that performs an algorithm based on a prime factorization problem, an electronic signature program that performs an algorithm based on a discrete logarithm problem, and a computer program that performs an algorithm based on an elliptic curve discrete logarithm problem. How to create an object public key certificate that contains two. According to claim 1,
The method of generating an object public key certificate further comprising transmitting, by the certification authority digital signature program, the object public key certificate to the object digital signature program. According to claim 1.
The method of generating an object public key certificate further comprising transmitting, by the certificate authority digital signature program, the object public key certificate to a cloud storage device. A computer program stored in a storage medium to perform the method of generating an object public key certificate according to claim 1. A storage medium storing a computer program for performing the method of generating an object public key certificate according to claim 1; and
A computer comprising a processor to execute the computer program stored in the storage medium. A method for providing a service for generating an object public key certificate using a computer of a certification authority and a computer of an object,
generating a public key of the object by an object digital signature program executed on the computer of the object, and transmitting identification information of the object and the public key of the object to the computer of the certification authority;
generating, by a certification authority digital signature program executed in the certification authority, an electronic signature of the certification authority for the identification information and the public key; and
generating, by the certificate authority digital signature program, the object public key certificate including the identification information, the public key, and the digital signature. According to claim 11,
transmitting, by the certification authority digital signature program, the object public key certificate to the object's computer; and
The method of providing a service for generating an object public key certificate further comprising the step of receiving the object public key certificate and storing it in a magnetic device by the object digital signature program. According to claim 11.
transmitting, by the certification authority digital signature program, the object public key certificate to a cloud storage device; and
The method of providing a service for generating an object public key certificate further comprising receiving and storing the object public key certificate by the cloud storage device. generating a pair of KGC public key and KGC private key by a KGC electronic signature program of a key generation center (KGC);
receiving, by a first user electronic signature program on a first user computer, first user identity information;
generating, by the KGC digital signature program, a first user public key and a first user private key using the first user identity information;
generating a KGC digital signature for the first user identity information and the first user public key by using the KGC digital signature using the first user private key;
generating, by the KGC digital signature program, a first user full private key including the first user public key, the first user private key, and the KGC digital signature; and
A method of operating an electronic signature system based on personal identification information comprising transmitting, by the KGC electronic signature program, the first user full private key to the first user electronic signature program through a secure channel; According to claim 14,
The KGC electronic signature program is one of electronic signature programs that are safe from decryption attacks using quantum computers,
The KGC electronic signature program and the first user electronic signature program are the same electronic signature program, a method of operating an electronic signature system based on personal identification information; According to claim 15,
receiving a message by the first user electronic signature program;
The first user electronic signature program uses the first user private key included in the first user full private key to obtain the first user electronic signature for the message, the first user identity information, and the first user public key. generating a signature; and
generating, by the first user electronic signature program, a first user transmitted electronic signature including the first user public key, the KGC electronic signature, and the first user electronic signature; and
The method of operating the electronic signature system based on personal identification information further comprising transmitting, by the first user electronic signature program, the first user identity information, the message, and the electronic signature transmitted by the first user to a second user computer; According to claim 16,
acquiring the KGC public key by a second user electronic signature program of a second user computer;
verifying, by the second user digital signature program, the KGC digital signature using the KGC public key;
verifying the first user electronic signature using the KCC public key when the second user digital signature program determines that the KGC digital signature is valid; and
Approving the first user's electronic signature when the second user's electronic signature program determines that the first user's electronic signature is valid. According to claim 17,
rejecting, by the second user electronic signature program, the electronic signature transmitted by the first user when it is determined that the KGC digital signature is not valid; and
If the second user electronic signature program determines that the first user electronic signature is not valid, rejecting the electronic signature transmitted by the first user. According to claim 14,
The key generation electronic signature program is one of electronic signature programs that are safe for decryption attacks using quantum computers,
The first user electronic signature program is another one of electronic signature programs that are safe from decryption attacks using the quantum computer. Method of operating an electronic signature system based on personal identification information. According to claim 19,
receiving a message by the first user electronic signature program;
The first user electronic signature program uses the first user private key included in the first user full private key to obtain the first user electronic signature for the message, the first user identity information, and the first user public key. generating a signature; and
generating, by the first user electronic signature program, a first user transmission electronic signature including the first user public key, KGC electronic signature, and the first user electronic signature; and
The method of operating the electronic signature system based on personal identification information further comprising transmitting, by the first user electronic signature program, the first user identity information, the message, and the electronic signature transmitted by the first user to a second user computer; According to claim 20,
acquiring the KGC public key by a second user electronic signature program of a second user computer;
verifying, by the second user digital signature program, the KGC digital signature using the KGC public key;
verifying the first user electronic signature using the KGC public key when the second user digital signature program determines that the KGC digital signature is valid; and
Approving the first user's electronic signature when the second user's electronic signature program determines that the first user's electronic signature is valid. According to claim 21,
rejecting, by the second user electronic signature program, the electronic signature transmitted by the first user when it is determined that the KGC digital signature is not valid; and
If the second user electronic signature program determines that the first user electronic signature is not valid, rejecting the electronic signature transmitted by the first user.

Images