基于SM9多密钥中心的用户身份隐私保护模型  

User identity privacy protection model based on SM9 multi-key center

作　　者：叶帅 蒋文保[1] 祁亚楠 YE Shuai;JIANG Wen-bao;QI Ya-nan(School of Information Management,Beijing Information Science and Technology University,Beijing 100192,China)

机构地区：[1]北京信息科技大学信息管理学院,北京100192

出　　处：《计算机工程与设计》2023年第7期1985-1992,共8页Computer Engineering and Design

基　　金：科技创新服务能力建设-网络空间安全学科创新平台建设基金项目(77F1910917);国家重点研发计划基金项目(2018YFB1800100)。

摘　　要：为解决SM9算法中密钥生成中心(key generation center,KGC)的单点权力过大问题和用户身份的隐私保护问题,提出一种基于SM9多密钥中心的用户身份隐私保护模型。利用区块链技术构建分布式账本,实现多KGC密钥生成参数的分布式管理;将动态身份标识技术与SM9算法相结合,实现匿名传输和匿名验证,兼顾用户身份的隐私性和传输的安全性。通过对用户身份的匿名性证明和对模型的安全性分析,说明模型中用户身份的匿名性以及模型的安全性;通过实验测试,给出模型各部分的相关数据,验证模型的可行性。To solve the problem of excessive single point power of the key generation center in SM9 algorithm and the problem of privacy protection of user identity,a user identity privacy protection model based on SM9 multi-key center was proposed.The distributed ledger was constructed using blockchain technology to realize the distributed management of multiple KGC key gene-ration parameters.The dynamic identity technology was combined with SM9 algorithm to realize anonymous transmission and anonymous authentication,and the privacy of user identity and transmission security were taken into account.Through the anonymity proof of user identity and the security analysis of the model,the anonymity of user identity and the security of the model were explained.Through experimental tests,the relevant data of each part of the model were given,and the feasibility of the model was verified.

关 键 词：SM9算法 多密钥中心 区块链 智能合约 隐私保护 动态身份标识 匿名传输 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]