Online/offline signature system and method based on multivariate cryptography

Patent metadata

Field	Value
Publication number	US-10623189-B2
Application number	US-201515761838-A
Country	US
Kind code	B2
Filing date	Dec 23, 2015
Priority date	Sep 22, 2015
Publication date	Apr 14, 2020
Grant date	Apr 14, 2020

Abstract

Disclosed is an offline/online signature system including a key distribution center (KDC) and a signature end, wherein the KDC includes a key generating module, an offline signature module, and a verification module; and the signature end includes an online signature module and a verification module. The key generating module generates a temporary signature required for online signature, and transmits the result to a sensor node for storage. The online signature module generates a signature for a specific message; and the verification module includes a processor and a public key transformation component, wherein the processor transmits the signature to the public key transformation component and determines whether the signature is valid.

First claim

The invention claimed is:

1. An online/offline signature system based on multivariate cryptography, comprising:
a KDC end for enabling building of a KDC end, which comprises a key generating module, an offline signature module, and a verification module connected sequentially, wherein the key generating module generates a public-private key pair with a reduced public key length; the offline signature module comprises a random message and vinegar variable generating component and a UOV signature component, the random message and vinegar variable generating component generating and transferring a random message and a value of a vinegar variable to the UOV signature component for signature, and the UOV signature component returning a message and a corresponding signature, while transmitting the result to a message signature end for storage; and the verification module comprises a public key transformation component, the signature being transmitted to the public key transformation component, and the signature being substituted into various multivariate polynomials in public key mapping for determining whether obtained data is equal to a message in a memory, and if so, then the signature being valid, and if not, then the signature being invalid;
and the message signature end for building the KDC end of the system, which comprises an online signature module and a verification module, wherein the online signature module comprises an affine transformation component, a linear conversion component, and an affine transformation inversion component connected sequentially, a message to be signed being subjected to affine transformation, linear conversion and affine transformation inversion computing successively, then a generated signature being transmitted to the verification module together with the message; and the verification module comprises a public key transformation component, the signature being transmitted to the public key transformation component, and the signature being substituted into various multivariate polynomials in public key mapping for determining whether obtained data is equal to a message in a memory, and if so, then the signature being valid, and if not, then the signature being invalid.

2. The online/offline signature system based on multivariate cryptography according to claim 1 , wherein the key generating module comprises a UOV parameter generating component, and a public key length reducing and key computing component connected sequentially, wherein the UOV parameter generating component is from a basic UOV signature scheme, and when the component requires to be called, a generating algorithm nested in the component is called to generate a UOV system parameter; and the public key length reducing and key computing component comprises a UOV public key reducing algorithm and a key computing algorithm, and when the component is called, a system parameter is input at the KDC end and a corresponding UOV public-private key pair is output.

3. The online/offline signature system based on multivariate cryptography according to claim 1 , further comprising a selector, wherein when the selector is in an on state, the signature module of the system works, and when the selector is in an off state, the verification module of the system works.

4. The online/offline signature system based on multivariate cryptography according to claim 3 , further comprising a scheduler connected to the selector, wherein the on state and off state of the selector are recognized and processed by the scheduler, and stored data is controlled and scheduled by the scheduler to various corresponding components for corresponding operations.

5. An online/offline signature method based on multivariate cryptography, comprising the following sequential steps:
(1) a KDC end performing a key generation process:
a. after receiving a security parameter, a KDC end generating keys used by an entire system;
b. in the process of key generation, the system requiring to use a public key reducing algorithm by means of which the design of a public key P with a reduced length is achievable;
c. according to the above designed public key, randomly generating an affine transformation T, and then computing a corresponding Q; and
d. the result finally obtained serving as public and private keys required to be used by the system, and a processor transmitting the message and a signature thereof together to a terminal user;
(2) a signature process:
a. performing an offline signature process in the KDC end first, and storing the result generated by the offline signature process in a message signature end requiring online signature in the next step; and
b. after receiving a message to be signed, the message signature end taking the message as an input and performing an online signature process, and finally generating a corresponding signature; and
(3) a verification process:
a. the verification process being capable of running on the KDC end or the message signature end, the message and the signature thereof being transmitted to a corresponding processor, and the processor storing the message and the signature thereof and then transmitting the signature to a public key transformation component; and
b. the public key transformation component substituting the signature into various multivariate polynomials of public key mapping, returning obtained data to the processor, and the processor determining whether the data is equal to a stored message: if so, the processor outputting “1” to the terminal user, indicating that the signature is valid; and if not, the processor outputting “0” to the terminal user, indicating that the signature is invalid.

6. The online/offline signature method based on multivariate cryptography according to claim 5 , wherein, in step (2), the offline signature process comprises the following steps:
a. given corresponding keys Q and T, in the offline signature process, the processor first randomly generating o+1 messages (m 1 , m 2 , . . . , m o+1 ), with a message length being o, then the processor randomly selecting a vinegar variable vector value x v ∈k v , and then utilizing this vinegar variable vector to run an original UOV signature algorithm to sign the o+1 messages, and the obtained result being (cert 1 , cert 2 , . . . , cert o+1 ); and
b. then transmitting (m 1 , m 2 , . . . , m o+1 ) and (cert 1 , cert 2 , . . . , cert o+1 ) to the message signature end for storage, and the parameter being input as a part of an online signature of a sensor.

7. The online/offline signature method based on multivariate cryptography according to claim 5 , wherein, in step (2), the online signature process comprises the following steps:
a. given a message m∈k o to be signed, in the online signature process, the message) signature end first performing T affine transformation for (cert 1 , cert 2 , . . . , cert o+1 ), i.e., computing cert T i =T(cert i ), i={1, . . . , o+1};
b. with regard to messages (m 1 , m 2 , . . . m o+1 ) and (cert T 1 , cert T 2 , . . . , cert T o+1 ), subtracting a (o+1)th item from the first o items thereof respectively, i.e.:
( m 1 ′=m 1 −m o+1 , . . . , m o ′=m o −m o+1 )
and
(cert 1 ′=cert T 1 −cert T o+1 , . . . , cert o ′=cert T o −cert T o+1 )

c. letting m′=m−m o+1 , and constructing an arbitrary linear combination with a base of (m 1 ′, m 2 ′, . . . , m o ′) for m′, denoted as m 1 ′=α 1 m 1 ′+α 2 m 2 ′+ . . . +α o m o ′;
d. computing cert=cert T o+1 +α 1 cert 1 ′+α 2 cert 2 ′+ . . . +α o cert o ′; and
e. finally, performing affine inversion for T on cert, i.e., computing X=T −1 (cert).

8. The online/offline signature method based on multivariate cryptography according

Assignees

• Univ South China Tech

Inventors

• Tang Shaohua
• Chen Jiahui

Classifications

• H04L9/3247 Primary

  involving digital signatures · CPC title

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• H04L9/083 Primary

  involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] · CPC title

• H04L9/3249 Primary

  using RSA or related signature schemes, e.g. Rabin scheme · CPC title

• H04L9/0861

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title