TWI852860B - Hybird security credential management system and method thereof - Google Patents

Abstract

A hybrid security credential management system and method thereof are provided, the system includes a first terminal device, a login center and a certificate center. The first terminal device produces a symmetric cryptography key, a first elliptic curve cryptography key pair, and a plurality of post-quantum cryptography key pairs for encryption and decryption, and transmits them to the login center. The login center generates a cocoon public key, and transmits the cocoon public key, the post-quantum cryptography public key for encryption and decryption, and a certificate application information to the certificate center. The certificate center generates a second elliptic curve cryptography key pair and generates a reconstructed value public key according to the cocoon public key. The certificate center generates post-quantum cryptographic signatures and production of hybrid pseudonymous certificates according to the post-quantum cryptography private key used for signature verification and the certificate application signature.

Description

Hybrid security certificate management system and method

The present invention relates to a technology for generating certificates, and in particular to a hybrid security certificate management system and method based on post-quantum cryptography (PQC) and elliptic curve cryptography (ECC).

FIG1 is a flowchart of the butterfly key expansion method of IEEE 1609.2.1. FIG2 is a specific calculation flowchart of the butterfly key expansion method of IEEE 1609.2.1.

Please refer to Figures 1 and 2. The security certificate management system at least includes a certificate authority (CA) 103, a registration authority (Registration Authority) 102, and a plurality of end entities (EE) (e.g., end entity 1 and end entity 2). The certificate authority 103 can issue a plurality of pseudonym certificates (Pseudonym Certificate, PC) to the end devices, and the end devices can use these pseudonym certificates for communication to avoid the end devices from frequently exposing their authorization certificates. The registration authority 102 is responsible for the registration and audit management of the end devices.

The terminal device 1 can generate a caterpillar key pair, and then the login center 102 generates a plurality of cocoon public keys, and the certification center 103 generates a plurality of butterfly public keys, and finally the terminal device 1 generates a plurality of cocoon private keys and a plurality of butterfly private keys.

In step S101 of the butterfly key expansion method, a terminal device 1 generates a plurality of Advanced Encryption Standard (AES) key pairs and Elliptic Curve Cryptography (ECC) key pairs. Step S101 mainly includes steps 1a, 1b, 1c and 1d.

In step 1a, the terminal device 1 generates an AES key ck for use as a signature, and the parameter ck is a symmetric key;

In step 1b, the terminal device 1 generates an AES key ek for encryption, and the parameter ek is a symmetric key;

In step 1c, the terminal device 1 generates an ECC key pair , as the caterpillar key pair, used for signature, parameter a is the private key, parameter A is the public key, parameter G is the reference point of the ellipse curve;

In step 1d, the terminal device 1 generates an ECC key pair , as the caterpillar key pair, used for signature, parameter p is the private key, parameter P is the public key, and parameter G is the reference point of the elliptical curve.

In step S102 of the butterfly key expansion method, the terminal device 1 transmits the generated symmetrical keys ck and ek, the caterpillar public keys A and P, and the certificate application information E, i.e. (ck, ek, A, P, E) to the registration center 102.

In step S103 of the butterfly key expansion method, the login center 102 generates a plurality of cocoon public keys according to the caterpillar public key and the integer ι, wherein step S103 mainly includes step 3a and step 3b.

In step 3a, the login center 102 generates multiple public keys. , parameter ι is an incremental integer known to both the terminal device 1 and the login center 102, and function f1 is an extended function based on the AES encryption algorithm, which can use the AES key ck to encrypt the parameter ι value to obtain an integer ciphertext.

In step 3b, the login center 102 generates multiple public keys. , parameter ι is an incremental integer known to both the terminal device 1 and the login center 102, and function f2 is an extended function based on the AES encryption algorithm, which can use the AES key ek to encrypt the parameter ι value to obtain an integer ciphertext.

In step S104 of the butterfly key expansion method, the registration center 102 transmits the generated multiple public keys (B _ι , Q ι , E) to the certification center 103 .

In step S105 of the butterfly key expansion method, the certificate center 103 generates a plurality of butterfly public keys according to the cocoon public keys. The butterfly public keys can be used as public key verification seals of pseudonymous certificates. Step S105 mainly includes step 5a, step 5b, step 5c, step 5d and step 5e.

In step 5a, the certification center 103 generates an ECC key pair , parameter r is the private key, parameter R is the public key, and parameter G is the base point of the ellipse curve;

In step 5b, the certification center 103 generates a reconstructed public key ;

In step 5c, the certificate center 103 generates a hidden certificate based on the reconstructed public key J and the certificate application information E. , calculate implicit certificate Hash value of ,in, is a hash function, implicit certificate Contains at least the reconstructed value public key and certificate application information E;

In step 5d, the certificate center 103 generates a reconstructed value private key , wherein parameter c is the elliptical curve cryptography private key of the certification center 103, and parameter n is the order of the elliptical curve;

In step 5e, the certification center 103 uses the public key As the public key, d is encrypted and signed using the Elliptic Curve Integrated Encryption Scheme (ECIES) algorithm. The ciphertext of d is d'.

In step S106 of the butterfly key expansion method, the certificate center 103 transmits the ciphertext d' and the hidden certificate To the login center terminal 102.

Step S107 of the butterfly key expansion method is to transmit the ciphertext d' and the hidden certificate from the login center 102 To the terminal device 1.

In step S108 of the butterfly key expansion method, the terminal device 1 generates a plurality of private keys according to the value ι, wherein step S108 mainly includes step 8a and step 8b.

In step 8a, the terminal device 1 generates a plurality of private keys. , function f1 is an extended function based on the AES encryption algorithm and is the same as the function f1 mentioned in the above paragraph 0011, and can use the AES key ck to encrypt the parameter ι value, the parameter ι is an incremental integer known by the terminal device 1 and the login center 102, and obtain an integer ciphertext, and the parameter n is the order of the elliptical curve;

In step 8b, the terminal device 1 generates a plurality of private keys. Function f2 is an extended function based on the AES encryption algorithm and is the same as the function f2 mentioned in paragraph 0012. The AES key ek can be used to encrypt the parameter ι value. The parameter ι is an incremental integer known to both the terminal device 1 and the login center 102 to obtain an integer ciphertext. The parameter n is the order of the elliptical curve.

Step S109 of the butterfly key expansion method is that the terminal device 1 decrypts the plaintext d according to the coiled private key q _ι , and uses the coiled private key q _ι and the d value to generate a butterfly private key. These butterfly private keys can be used as private keys for signing or decrypting pseudonymous certificates. Step S109 mainly includes step 9a, step 9b, and step 9c.

In step 9a, the terminal device 1 decrypts the plain text d according to the private key q _ι ;

In step 9b, the terminal device 1 calculates the implicit certificate Hash value of ,in, is the hash function;

In step 9c, the terminal device 1 generates multiple butterfly private keys , the parameter n is the order of the elliptical curve.

Referring to FIG. 2 , in step S110 of the butterfly key expansion method, the terminal device 2 can obtain the hidden certificate of the terminal device 1 from the certificate center 103. .

In step S111, the terminal device 2 calculates the implicit certificate Hash value of ,in, Is a hash function that generates a butterfly public key , where parameter J is derived from the implicit certificate Parameter C is the elliptical curve cryptography public key of the certificate center 103.

Although the current car network information security certificate management system can use elliptic curve cryptography to provide an expanded public key pair as a pseudonymous certificate based on the existing public key, Professor Shor of the Department of Applied Mathematics at the Massachusetts Institute of Technology proposed a quantum prime factorization algorithm in 1994. By using quantum properties, the cracking time of the current mainstream cryptographic algorithms (such as RSA cryptography or Elliptic Curve Cryptography (ECC)) can be reduced from exponential time complexity to 10000. Reduced to polynomial level time complexity O(n).

The main technical feature of the previous case "Event Recording System and Vehicle Event Recording Device" (Patent No.: I814478) is that the vehicle event recording system mentioned in the patent adopts the post-quantum cryptographic signature algorithm Falcon algorithm and the post-quantum cryptographic encryption algorithm NTRU Encrypt algorithm. However, the vehicle event recording system assumes that the vehicle terminal equipment is transmitted on a general 4G or 5G mobile communication network, and is transmitted from the vehicle terminal equipment to the cloud server, so it is less subject to packet size restrictions. If it is transmitted in a V2X (such as Dedicated Short-Range Communications (DSRC)) or C-V2X environment, when the vehicle terminal equipment transmits to other terminal equipment, there is a packet size restriction. If the post-quantum cryptography signature algorithm Falcon algorithm and the post-quantum cryptography encryption algorithm NTRU Encrypt algorithm are all adopted, the length of the Secure Protocol Data Unit (SPDU) will exceed the packet size limit, resulting in failure to send normally. In addition, since the vehicle-mounted event recording system uses its original private key for signature, it is not anonymous and there will be privacy exposure issues.

The present invention provides a hybrid security certificate management system and method thereof, which can not only avoid being cracked by quantum computing, but also use a hybrid pseudonymous certificate to protect its privacy.

The present invention discloses a hybrid security certificate management system, comprising a first terminal device, a login center and a certificate center, wherein the first terminal device is connected to the login center for communication, and is used to generate a symmetric cryptographic key, a first elliptical cryptographic key pair, and a plurality of post-quantum cryptographic key pairs for encryption and decryption, wherein the first elliptical cryptographic key pair The symmetric cryptographic key, the elliptical cryptographic public key, the elliptical cryptographic private key, each post-quantum cryptographic key pair for encryption and decryption includes a post-quantum cryptographic public key for encryption and decryption and a post-quantum cryptographic private key for encryption and decryption, and the symmetric cryptographic key, the elliptical cryptographic public key, the post-quantum cryptographic public keys for encryption and decryption, and the certificate application information are transmitted to the registration center. The registration center is used to generate a cocoon public key, and transmit the cocoon public key, the post-quantum cryptographic public key for encryption and decryption, and the certificate application information to the certificate center. The certificate center is connected to the login center to generate a second elliptical curve cryptographic key pair based on a random number, and to generate a reconstructed value public key based on the cocoon public key. The certificate center generates a post-quantum cryptographic signature based on the signature stamp using a post-quantum cryptographic private key and the certificate application information, and generates a hybrid pseudonymous certificate. The hybrid pseudonymous certificate at least includes a reconstructed value public key, certificate application information, and a post-quantum cryptographic signature.

A hybrid security certificate management method of the present invention is applicable to a hybrid security certificate management system including a first terminal device, a login center and a certificate center, wherein the first terminal device and the certificate center are respectively connected to the login center for communication. The method includes the first terminal device generating a symmetric cryptographic key, a first elliptical cryptographic key pair, and a plurality of post-quantum cryptographic key pairs for encryption and decryption, wherein the first elliptical cryptographic key pair includes an elliptical cryptographic public key and an elliptical cryptographic private key, and each post-quantum cryptographic key pair for encryption and decryption includes a post-quantum cryptographic public key for encryption and decryption and a post-quantum cryptographic private key for encryption and decryption, and the symmetric cryptographic key is generated by the first terminal device. The cryptographic key, the elliptical cryptographic public key, the post-quantum cryptographic public keys for encryption and decryption, and the certificate application information are transmitted to the registration center; the registration center generates the cocoon public key and transmits the cocoon public key, the post-quantum cryptographic public key for encryption and decryption, and the certificate application information to the certificate center; and the certificate center generates the first The certificate center generates a post-quantum cryptographic signature based on the post-quantum cryptographic private key and the certificate application information according to the signature stamp, and generates a hybrid pseudonymous certificate. The hybrid pseudonymous certificate at least includes the reconstructed public key, the certificate application information, and the post-quantum cryptographic signature.

Based on the above, the present invention provides a hybrid security certificate management system and method thereof, wherein the certificate center can use post-quantum cryptography certificates to avoid being cracked by quantum computing, and the terminal device can use elliptical curve cryptography to sign the security protocol data unit to obtain a security protocol data unit with a smaller packet length; and the terminal device can obtain a hybrid pseudonymous certificate based on post-quantum cryptography and elliptical curve cryptography to protect its privacy.

In order to make the above features and advantages of the present invention more clearly understood, embodiments are specifically cited below and described in detail with reference to the accompanying drawings.

Some embodiments of the present invention will be described in detail below with reference to the accompanying drawings. When the same element symbols appear in different drawings, they will be regarded as the same or similar elements. These embodiments are only part of the present invention and do not disclose all possible implementations of the present invention.

Fig. 3 is a method flow chart of a hybrid butterfly key expansion method according to an embodiment of the present invention. Fig. 4 is a specific calculation flow chart of a hybrid butterfly key expansion method according to an embodiment of the present invention.

Please refer to FIG. 3 and FIG. 4 , a hybrid security certificate management system disclosed herein includes a plurality of terminal devices, a login center 102, and a certificate center 103. Hereinafter, the plurality of terminal devices are described by taking a first terminal device (i.e., terminal device 1) and a second terminal device (i.e., terminal device 2) as examples. Among them, terminal device 1 and certificate center 103 are respectively connected to the login center 102 for communication, and terminal device 2 is connected to the certificate center 103 for communication.

In step S301, the terminal device 1 generates a symmetric cryptographic key, a first elliptical cryptographic key pair, and a plurality of post-quantum cryptographic key pairs for encryption and decryption, wherein the first elliptical cryptographic key pair includes an elliptical cryptographic public key and an elliptical cryptographic private key, and each post-quantum cryptographic key pair for encryption and decryption includes a post-quantum cryptographic public key for encryption and decryption and a post-quantum cryptographic private key for encryption and decryption. Specifically, in step S301a, the terminal device 1 generates an AES key , used as a signature, parameter ck is a symmetrical key. In step S301b, the terminal device 1 generates an ECC key pair , as the caterpillar key pair, used for signature, parameter a is the caterpillar private key, parameter A is the caterpillar public key, and parameter G is the reference point of the ellipse curve. In step S301c, the terminal device 1 generates a post-quantum cryptography private key set p () for encryption and decryption and a post-quantum cryptography public key set P () for encryption and decryption, and generates certificate application information E.

In step S302, the terminal device 1 uses the symmetric cryptography key , caterpillar public key A, post-quantum cryptography public key set P for encryption, and certificate application information E, namely ( , A, P, E) is transmitted to the registration center terminal 102.

In step S303, the login center 102 generates a cocoon public key, and transmits the cocoon public key, the post-quantum cryptography public key for encryption and decryption, and the certificate application information E to the certificate center.

Specifically, the login center 102 uses the caterpillar public key A and the integer ι and Generate public key , the parameter ι is an incremental integer known to both the terminal device 1 and the login center 102, and the function f1 is an extended function based on the AES encryption algorithm, which can use the AES key The encryption parameter ι value, the parameter ι is an incremental integer known to both the terminal device 1 and the login center 102, and an integer ciphertext is obtained. The encryption post-quantum cryptography public key is obtained from the encryption post-quantum cryptography public key set P according to the parameter ι. .

In step S304, the login center 102 generates the public key ( , , E) is transmitted to the certificate center terminal 103.

In step S305, the certificate center 103 generates a butterfly public key based on the cocoon public key. The butterfly public key can be used as a public key verification seal for a pseudonymous certificate. Step S305 mainly includes step S305a, step S305b, step S305c and step S305d.

In step S305a, the certification center 103 generates an ECC key pair (i.e., a second elliptical curve cryptography key pair). , parameter r is the private key, parameter R is the public key, and parameter G is the base point of the ellipse curve.

In step S305b, the certification center 103 generates a reconstructed public key .

In step S305c, the certificate center 103 generates an explicit certificate (i.e., a hybrid security certificate). and PQC signature S, explicit certificate Contains at least the reconstructed value public key , certificate application information E, and post-quantum cryptographic signature S. The PQC signature S is generated by the certificate center 103 using the post-quantum cryptographic private key to generate an explicit certificate. Signature.

In step S305d, the certificate center 103 calculates the explicit certificate Hash value of ,in, Is a hash function that generates a reconstructed value private key , where the parameter n is the order of the elliptical curve, and the encryption is done using a post-quantum cryptography public key As the public key, the quantum cryptography encryption algorithm is used to encrypt the reconstructed private key d. The ciphertext of d is .

In step S306, the certificate center 103 transmits the ciphertext d' and the explicit certificate Go to the login center terminal 102.

In step S307, the login center 102 sends the ciphertext d' and the explicit certificate To the terminal device 1.

In step S308, the terminal device 1 generates a private key according to the value , function f1 is an extended function based on the AES encryption algorithm and is the same as the function f1 mentioned in paragraph 0046 above. The AES key ck can be used to encrypt the parameter ι value. The parameter ι is an incremental integer known to the terminal device 1 and the login center 102. An integer ciphertext is obtained. The parameter n is the order of the elliptical curve. The post-quantum cryptography private key is obtained according to the parameter ι. .

Step S309 mainly includes step S309a, step S309b and step S309c. In step S309a, the terminal device 1 uses the post-quantum cryptography private key Decrypt and obtain the plaintext d.

In step S309b, the terminal device 1 calculates the explicit certificate Hash value of ,in, is the hash function.

In step S309c, the terminal device 1 uses the hash value h and the private key , d value to generate butterfly private key , the butterfly private key k can be used as the private key signature of the pseudonymous certificate, and the parameter n is the order of the ellipse curve.

In step S310, terminal device 2 can obtain the explicit certificate of terminal device 1 from the certificate center 103. .

In step S311, the terminal device 2 can use the post-quantum cryptography public key of the certificate center 103 to authenticate the explicit certificate. The post-quantum cryptographic signature S in the calculation is verified and the explicit certificate is calculated. Hash value of ,in, is a hashing function and generates a butterfly public key , where parameter J is derived from the explicit certificate Obtained in.

In one embodiment, the terminal device 1 can sign the Secure Protocol Data Unit (SPDU) according to the butterfly private key k, and place the elliptical curve cryptographic signature and the hybrid pseudonym certificate in the SPDU. The terminal device 2 can use the certificate center 13 to obtain the post-quantum cryptography public key and verify the hybrid pseudonymous certificate. The PQC signature S in the terminal device 2 can use the hybrid pseudonym certificate The parameter J and the mixed pseudonym certificate Hash value of Generate Butterfly Public Key , verify the elliptical curve cryptographic signature in the SPDU.

In this way, the terminal device can use elliptical curve cryptography to sign the security protocol data unit to obtain a security protocol data unit with a smaller packet length; and the terminal device can obtain a hybrid pseudonymous certificate based on post-quantum cryptography and elliptical curve cryptography to protect its privacy.

FIG5 is a specific calculation flow chart of a hybrid butterfly key expansion method according to a first embodiment of the present invention.

Please refer to FIG. 5 . In the first embodiment, the post-quantum cryptography public key for the signature stamp is the Falcon public key, and the post-quantum cryptography private key for the signature stamp is the Falcon private key.

In step S501, the terminal device 1 generates a symmetric cryptographic key, a first elliptical cryptographic key pair (private key a and public key A), and a plurality of post-quantum cryptographic key pairs for encryption and decryption, wherein each post-quantum cryptographic key pair for encryption and decryption includes a post-quantum cryptographic public key for encryption and decryption and a post-quantum cryptographic private key for encryption and decryption.

Specifically, the terminal device 1 generates an AES key , used as a signature, the parameter ck is a symmetrical key. The terminal device 1 generates an ECC key pair , as the caterpillar key pair, used for signature, parameter a is the caterpillar private key, parameter A is the caterpillar public key, and parameter G is the reference point of the ellipse curve. The terminal device 1 generates a post-quantum cryptography private key set p () for encryption and decryption and a post-quantum cryptography public key set P () for encryption and decryption, where the post-quantum cryptography private key set p for encryption and decryption is the Kyber algorithm private key set, and the post-quantum cryptography public key set P for encryption and decryption is the Kyber algorithm public key set, and the terminal device 1 generates the certificate application information E.

In step S502, the terminal device 1 uses the symmetric cryptography key , caterpillar public key A, post-quantum cryptography public key set P for encryption, and certificate application information E, namely ( , A, P, E) is transmitted to the registration center terminal 102.

In step S503, the login center 102 generates a cocoon public key, and transmits the cocoon public key, the post-quantum cryptography public key for encryption and decryption, and the certificate application information E to the certificate center.

Specifically, the login center 102 uses the caterpillar public key A and the integer ι and Generate public key , the parameter ι is an incremental integer known to both the terminal device 1 and the login center 102, and the function f1 is an extended function based on the AES encryption algorithm, which can use the AES key The encryption parameter ι value, the parameter ι is an incremental integer known to both the terminal device 1 and the login center 102, and an integer ciphertext is obtained. The encryption post-quantum cryptography public key is obtained from the encryption post-quantum cryptography public key set P according to the parameter ι. .

In step S504, the login center 102 generates the public key ( , , E) is transmitted to the certificate center terminal 103.

In step S505, the certificate center 103 generates a butterfly public key based on the cocoon public key. The butterfly public key can be used as a public key verification seal for a pseudonymous certificate. , parameter r is the private key, parameter R is the public key, parameter G is the reference point of the ellipse curve, the certificate center 103 generates the reconstructed value public key , and generate an explicit certificate (i.e. a hybrid security certificate) and PQC signature S, explicit certificate Contains at least the reconstructed value public key , certificate application information E, and post-quantum cryptography signature S. The PQC signature S is a Falcon algorithm signature S, which is generated by the certificate center 103 using the Falcon algorithm private key to generate an explicit certificate. Signature.

Certificate center 103 calculates explicit certificate Hash value of ,in, Is a hash function that generates a reconstructed value private key , where the parameter n is the order of the ellipse, and the encryption is done using a post-quantum cryptography public key The reconstructed private key d is encrypted using the Kyber encryption algorithm as the public key. The ciphertext of d is .

In step S506, the certificate center 103 transmits the ciphertext d' and the explicit certificate Go to the login center terminal 102.

In step S507, the login center 102 sends the ciphertext d' and the explicit certificate To the terminal device 1.

In step S508, the terminal device 1 generates a private key according to the value , function f1 is an extended function based on the AES encryption algorithm and is the same as the function f1 mentioned in paragraph 0046 above. The AES key ck can be used to encrypt the parameter ι value. The parameter ι is an incremental integer known to the terminal device 1 and the login center 102 to obtain an integer ciphertext. The parameter n is the order of the elliptical curve, and the post-quantum cryptography private key is obtained according to the parameter ι. , private key for post-quantum cryptography Kyber algorithm private key .

In step S509, the terminal device 1 uses the post-quantum cryptography private key Decrypt to obtain plaintext d and calculate the explicit certificate Hash value of ,in, is a hash function. The terminal device 1 uses the hash value h and the private key , d value to generate butterfly private key , the butterfly private key can be used as the private key signature of the pseudonymous certificate, and the parameter n is the order of the ellipse curve.

In step S510, terminal device 2 can obtain the explicit certificate of terminal device 1 from the certificate center 103. .

In step S511, the terminal device 2 can use the post-quantum cryptography public key of the certificate center 103 to authenticate the explicit certificate. The post-quantum cryptographic signature S in the post-quantum cryptographic public key is used to verify the signature. It is the public key of the Falcon algorithm, used to calculate the explicit certificate. Hash value of ,in, is a hashing function and generates a butterfly public key , where parameter J is derived from the explicit certificate Obtained in.

In the first embodiment, the terminal device 1 can sign the Secure Protocol Data Unit (SPDU) according to the butterfly private key k, and place the elliptical curve cryptographic signature and the hybrid pseudonym certificate in the SPDU. The terminal device 2 can use the certificate center 13 to obtain the post-quantum cryptography public key and verify the hybrid pseudonymous certificate. The Falcon signature S in the terminal device 2 can use the hybrid pseudonymous certificate The parameter J and the mixed pseudonym certificate Hash value of Generate Butterfly Public Key , verify the elliptical curve cryptographic signature in the SPDU.

In this way, the terminal device can use elliptical curve cryptography to sign the security protocol data unit to obtain a security protocol data unit with a smaller packet length; and the terminal device can obtain a hybrid pseudonymous certificate based on post-quantum cryptography and elliptical curve cryptography to protect its privacy.

FIG6 is a specific calculation flow chart of a hybrid butterfly key expansion method according to a second embodiment of the present invention.

Please refer to FIG. 6 . In the second embodiment, the post-quantum cryptography public key for the signature stamp is a Dilithium public key, and the post-quantum cryptography private key for the signature stamp is a Dilithium private key.

In step S601, the terminal device 1 generates a symmetric cryptographic key, a first elliptical cryptographic key pair (private key a and public key A), and a plurality of post-quantum cryptographic key pairs for encryption and decryption, wherein each post-quantum cryptographic key pair for encryption and decryption includes a post-quantum cryptographic public key for encryption and decryption and a post-quantum cryptographic private key for encryption and decryption.

Specifically, the terminal device 1 generates an AES key , used as a signature, parameter ck is a symmetrical key. The terminal device 1 generates an ECC key pair , as the caterpillar key pair, used for signature, parameter a is the caterpillar private key, parameter A is the caterpillar public key, and parameter G is the reference point of the ellipse curve. The terminal device 1 generates a post-quantum cryptography private key set p () for encryption and decryption and a post-quantum cryptography public key set P () for encryption and decryption, where the post-quantum cryptography private key set p for encryption and decryption is the Kyber algorithm private key set, and the post-quantum cryptography public key set P for encryption and decryption is the Kyber algorithm public key set, and the terminal device 1 generates the certificate application information E.

In step S602, the terminal device 1 uses the symmetric cryptography key , caterpillar public key A, post-quantum cryptography public key set P for encryption, and certificate application information E, namely ( , A, P, E) is transmitted to the registration center terminal 102.

In step S603, the login center 102 generates a cocoon public key, and transmits the cocoon public key, the post-quantum cryptography public key for encryption and decryption, and the certificate application information E to the certificate center.

Specifically, the login center 102 uses the caterpillar public key A and the integer ι and Generate public key , the parameter ι is an incremental integer known to both the terminal device 1 and the login center 102, and the function f1 is an extended function based on the AES encryption algorithm, which can use the AES key The encryption parameter ι value, the parameter ι is an incremental integer known to both the terminal device 1 and the login center 102, and an integer ciphertext is obtained. The encryption post-quantum cryptography public key is obtained from the encryption post-quantum cryptography public key set P according to the parameter ι. .

In step S604, the login center 102 generates the public key ( , , E) is transmitted to the certificate center terminal 103.

In step S605, the certificate center 103 generates a butterfly public key based on the cocoon public key. The butterfly public key can be used as a public key verification seal for a pseudonymous certificate. , parameter r is the private key, parameter R is the public key, parameter G is the reference point of the ellipse curve, the certificate center 103 generates the reconstructed value public key , and generate an explicit certificate (i.e. a hybrid security certificate) and PQC signature S, explicit certificate Contains at least the reconstructed value public key , certificate application information E, and PQC signature S. PQC signature S is a Dilithium algorithm signature S, which is generated by the certificate center 103 using the Dilithium algorithm private key to validate the explicit certificate. Signature.

Certificate center 103 calculates explicit certificate Hash value of ,in, Is a hash function that generates a reconstructed value private key , where the parameter n is the order of the ellipse, and the encryption is done using a post-quantum cryptography public key The reconstructed private key d is encrypted using the Kyber encryption algorithm as the public key. The ciphertext of d is .

In step S606, the certificate center 103 transmits the ciphertext d' and the explicit certificate Go to the login center terminal 102.

In step S607, the login center 102 sends the ciphertext d' and the explicit certificate To the terminal device 1.

In step S608, the terminal device 1 generates a private key according to the value , function f1 is an extended function based on the AES encryption algorithm and is the same as the function f1 mentioned in paragraph 0046 above. The AES key ck can be used to encrypt the parameter ι value. The parameter ι is an incremental integer known to the terminal device 1 and the login center 102. An integer ciphertext is obtained. The parameter n is the order of the elliptical curve. The post-quantum cryptography private key is obtained according to the parameter ι. , private key for post-quantum cryptography Kyber algorithm private key .

In step S609, the terminal device 1 uses the post-quantum cryptography private key Decrypt to obtain plaintext d and calculate the explicit certificate Hash value of ,in, is a hash function. The terminal device 1 uses the hash value h and the private key , d value to generate butterfly private key , the butterfly private key can be used as the private key signature of the pseudonymous certificate, and the parameter n is the order of the ellipse curve.

In step S610, terminal device 2 can obtain the explicit certificate of terminal device 1 from the certificate center 103. .

In step S611, the terminal device 2 can use the post-quantum cryptography public key of the certificate center 103 to authenticate the explicit certificate. The post-quantum cryptographic signature S is verified, and the post-quantum cryptographic public key Dilithium algorithm public key, calculate explicit certificate Hash value of ,in, is a hashing function and generates a butterfly public key , where parameter J is derived from the explicit certificate Obtained in.

In a second embodiment, the terminal device 1 can sign the Secure Protocol Data Unit (SPDU) according to the butterfly private key k, and place the elliptical curve cryptographic signature and the hybrid pseudonym certificate in the SPDU. The terminal device 2 can use the certificate center 13 to obtain the post-quantum cryptography public key and verify the hybrid pseudonymous certificate. The Dilithium signature S in the terminal device 2 can use the hybrid pseudonymous certificate The parameter J and the mixed pseudonym certificate Hash value of Generate Butterfly Public Key , verify the elliptical curve cryptographic signature in the SPDU.

In this way, the terminal device can use elliptical curve cryptography to sign the security protocol data unit to obtain a security protocol data unit with a smaller packet length; and the terminal device can obtain a hybrid pseudonymous certificate based on post-quantum cryptography and elliptical curve cryptography to protect its privacy.

Based on the above, the present invention provides a hybrid security certificate management system and method thereof, wherein the certificate center can use post-quantum cryptography certificates to avoid being cracked by quantum computing, and the terminal device can use elliptical curve cryptography to sign the security protocol data unit to obtain a security protocol data unit with a smaller packet length; and the terminal device can obtain a hybrid pseudonymous certificate based on post-quantum cryptography and elliptical curve cryptography to protect its privacy.

Although the present invention has been disclosed as above by the embodiments, they are not intended to limit the present invention. Any person with ordinary knowledge in the relevant technical field can make some changes and modifications without departing from the spirit and scope of the present invention. Therefore, the protection scope of the present invention shall be defined by the scope of the attached patent application.

1, 2: Terminal device 102: Login center 103: Certificate center S101, 1a, 1b, 1c, 1d, S102, S103, 3a, 3b, S104, S105, 5a, 5b, 5c, 5d, 5e, S106, S107, S108, 8a, 8b, S109, 9a, 9b, 9c, S110, S111, S301, S301a, S301b, S301c, S302, S303, S304, S305, S305a, S305b, S305c, S 305d, S306, S307, S308, S309, S309a, S309b, S309c, S310, S311, S501, S502, S503, S504, S505, S506, S507, S508, S509, S510, S511, S601, S602, S603, S604, S605, S606, S607, S608, S609, S610, S611: Step

FIG1 is a method flow chart of the known IEEE 1609.2.1 butterfly key expansion method. FIG2 is a specific calculation flow chart of the known IEEE 1609.2.1 butterfly key expansion method. FIG3 is a method flow chart of a hybrid butterfly key expansion method according to an embodiment of the present invention. FIG4 is a specific calculation flow chart of a hybrid butterfly key expansion method according to an embodiment of the present invention. FIG5 is a specific calculation flow chart of a hybrid butterfly key expansion method according to a first embodiment of the present invention. FIG6 is a specific calculation flow chart of a hybrid butterfly key expansion method according to a second embodiment of the present invention.

1: Terminal device

102: Login center

103: Certificate center

S301, S301a, S301b, S301c, S302, S303, S304, S305, S305a, S305b, S305c, S305d, S306, S307, S308, S309, S309a, S309b, S309c: Steps

Claims (16)

A hybrid security certificate management system includes a first terminal device, a login center and a certificate center, wherein, The first terminal device is connected to the login center for communication, and is used to generate a symmetric cryptographic key, a first elliptical cryptographic key pair, and a plurality of post-quantum cryptographic key pairs for encryption and decryption, wherein the first elliptical cryptographic key pair includes an elliptical cryptographic public key and an elliptical cryptographic private key, and each of the post-quantum cryptographic key pairs for encryption and decryption includes a post-quantum cryptographic public key for encryption and decryption and a post-quantum cryptographic private key for encryption and decryption, and transmit the symmetric cryptographic key, the elliptical cryptographic public key, the post-quantum cryptographic public keys for encryption and decryption, and a certificate application information to the login center, The registration center is used to generate a cobweb public key, and transmit the cobweb public key, the post-quantum cryptography public key for encryption and decryption, and the certificate application information to the certificate center, and the certificate center is connected to the registration center for communication, and is used to generate a second elliptical curve cryptography key pair according to a random number, and generate a reconstructed value public key according to the cobweb public key. The certificate center generates a post-quantum cryptography signature according to a signature stamp post-quantum cryptography private key and the certificate application information, and generates a hybrid pseudonym certificate, which at least includes the reconstructed value public key, the certificate application information, and the post-quantum cryptography signature. A hybrid security certificate management system as described in claim 1, wherein the certificate center is further used to generate a reconstructed value private key based on the hybrid pseudonymous certificate and the random number, and encrypt the reconstructed value private key using a post-quantum cryptography public key based on the encryption and decryption, and transmit the encrypted reconstructed value private key and the hybrid pseudonymous certificate to the login center, and transmit the encrypted reconstructed value private key and the hybrid pseudonymous certificate to the first terminal device via the login center. A hybrid security certificate management system as described in claim 2, wherein the first terminal device is further used to generate a cocoon private key, and decrypts the encrypted reconstructed value private key using the post-quantum cryptography private key to obtain the plaintext of the reconstructed value private key, and the first terminal device generates a butterfly private key based on the hybrid pseudonymous certificate, the cocoon private key, and the reconstructed value private key. A hybrid security certificate management system as described in claim 3, wherein the first terminal device is further used to generate an elliptical curve cryptographic signature based on the butterfly private key and data in a secure protocol data unit (SPDU), wherein the secure protocol data unit includes the hybrid pseudonymous certificate and the elliptical curve cryptographic signature. A hybrid security certificate management system as described in claim 4, wherein the hybrid security certificate management system further includes a second terminal device, which obtains the hybrid pseudonymous certificate through the certificate center, verifies the post-quantum cryptography signature in the hybrid pseudonymous certificate with a post-quantum cryptography public key based on a signature stamp of the certificate center, and generates a butterfly public key based on the hybrid pseudonymous certificate and the reconstructed value public key. A hybrid security certificate management system as described in claim 5, wherein the second terminal device is further used to verify the elliptical curve cryptographic signature in the SPDU based on the butterfly public key. A hybrid secure certificate management system as described in claim 6, wherein the post-quantum cryptography public key used for the signature stamp is a Dilithium public key or a Falcon public key, and the post-quantum cryptography private key used for the signature stamp is a Dilithium private key or a Falcon private key. A hybrid secure certificate management system as described in claim 1, wherein the post-quantum cryptography key pairs for encryption and decryption are Kyber key pairs. A hybrid security certificate management method is applicable to a hybrid security certificate management system including a first terminal device, a login center and a certificate center, wherein the first terminal device and the certificate center are respectively connected to the login center for communication, and the method includes: The first terminal device generates a symmetric cryptographic key, a first elliptical cryptographic key pair, and a plurality of post-quantum cryptographic key pairs for encryption and decryption, wherein the first elliptical cryptographic key pair includes an elliptical cryptographic public key and an elliptical cryptographic private key, and each of the post-quantum cryptographic key pairs for encryption and decryption includes a post-quantum cryptographic public key for encryption and decryption and a post-quantum cryptographic private key for encryption and decryption, and transmits the symmetric cryptographic key, the elliptical cryptographic public key, the post-quantum cryptographic public keys for encryption and decryption, and a certificate application information to the registration center end; The registration center generates a cobweb public key, and transmits the cobweb public key, the post-quantum cryptography public key for encryption and decryption, and the certificate application information to the certificate center; and The certificate center generates a second elliptical curve cryptography key pair based on a random number, and generates a reconstructed value public key based on the cobweb public key. The certificate center generates a post-quantum cryptography signature based on a signature post-quantum cryptography private key and the certificate application information, and generates a hybrid pseudonym certificate, which at least includes the reconstructed value public key, the certificate application information, and the post-quantum cryptography signature. A hybrid security certificate management method as described in claim 9, wherein the method further comprises: The certificate center generates a reconstructed value private key based on the hybrid pseudonymous certificate and the random number, and encrypts the reconstructed value private key with a post-quantum cryptography public key based on the encryption and decryption, and transmits the encrypted reconstructed value private key and the hybrid pseudonymous certificate to the login center, and transmits the encrypted reconstructed value private key and the hybrid pseudonymous certificate to the first terminal device via the login center. A hybrid security certificate management method as described in claim 10, wherein the method further comprises: The first terminal device generates a cocoon private key, decrypts the encrypted reconstructed value private key according to the encryption and decryption post-quantum cryptography private key to obtain the plaintext of the reconstructed value private key, and the first terminal device generates a butterfly private key according to the hybrid pseudonymous certificate, the cocoon private key, and the reconstructed value private key. A hybrid security certificate management method as described in claim 11, wherein the method further comprises: The first terminal device generates an elliptical curve cryptographic signature based on the butterfly private key and data in a secure protocol data unit (SPDU), wherein the secure protocol data unit includes the hybrid pseudonymous certificate and the elliptical curve cryptographic signature. A hybrid security certificate management method as described in claim 12, wherein the hybrid security certificate management system further includes a second terminal device, and the method further includes: The second terminal device obtains the hybrid pseudonymous certificate through the certificate center, verifies the post-quantum cryptography signature in the hybrid pseudonymous certificate with a post-quantum cryptography public key based on a signature stamp of the certificate center, and generates a butterfly public key based on the hybrid pseudonymous certificate and the reconstructed value public key. A hybrid security certificate management method as described in claim 13, wherein the method further comprises: The second terminal device verifies the elliptical curve cryptographic signature in the SPDU based on the butterfly public key. A hybrid security certificate management method as described in claim 13, wherein the post-quantum cryptography public key used for the signature stamp is a Dilithium public key or a Falcon public key, and the post-quantum cryptography private key used for the signature stamp is a Dilithium private key or a Falcon private key. A hybrid secure certificate management method as described in claim 9, wherein the post-quantum cryptography key pairs used for encryption and decryption are Kyber key pairs.