基于国密算法SM2的云端协同签名模块研究  

Research on Cloud-based Co-signature Module Based on the National Cryptographic Algorithm SM2

作　　者：和羽辛 许盛伟 HE Yuxin;XU Shengwei(Department of Cryptographic Science and Technology,Beijing Institute of Electronic Science and Technology,Beijing 100070,China)

机构地区：[1]北京电子科技学院密码科学与技术系,北京100070

出　　处：《计算机与网络》2023年第10期68-73,共6页Computer & Network

摘　　要：协同签名能保证数据以不可篡改和不可否认的方式传输。然而传统协同签名方案存在移动智能终端私钥安全风险高、云端通信数据量大、协同签名效率低等不足。提出一个基于SM2算法的云端协同签名协议,可解决私钥安全管理、签名验签效率低等问题。在此基础上,研究并实现一种基于国密算法的云端协同签名模块,采用服务器—客户机架构和云端通信,增强生成数字签名的合法性,优化交互次数、运算效率。经测试证明,此模块可实现移动智能终端私钥的安全存储和快速签名,可广泛应用于物联网、移动办公等单个服务节点,服务大量移动智能终端的场景。Co-signature can guarantee data transmission in a manner of immutability and non-repudiation.However,in traditional co-signature solutions,several defects can be seen,such as high security risks of private keys in mobile intelligent terminals,large data volume in cloud-based communications and low co-signature efficiency.A cloud-based co-signature protocol based on the SM2 algorithm is proposed to solve the problems of private key security management and low efficiency of signature verification.On this basis,a cloud-based co-signature module based on the national cryptographic algorithm SM2 is studied and implemented,in which the server-client architecture and the cloud-based communications are adopted to enhance the legitimacy of generated digital signatures and optimize the number of interactions and the computing efficiency.It has been tested and proved that the secure storage and fast signature of private keys in mobile intelligent terminals can be realized by this module,which can be widely used in the scenarios of IoT,mobile office system and other individual service nodes that serve a large number of mobile intelligent terminals.

关 键 词：协同签名 终端密码模块 SM2算法 移动智能终端 

分 类 号：TP391.4[自动化与计算机技术—计算机应用技术]