Digital signature generating method and digital signature verifying method

• US 20020108044A1
• Filed: 02/28/2001
• Published: 08/08/2002
• Est. Priority Date: 12/07/2000
• Status: Active Grant

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Mishima, Hisanori, Miyazaki, Kunihiko, Matsuki, Takeshi, Takaragi, Kazuo, Susaki, Seiichi, Sasaki, Ryoichi, Matsumoto, Tsutomu, Takeuchi, Kunihito, Iwamura, Mitsuru
• Granted Patent: US 6,816,969 B2
• Time in Patent Office: Days
• US Class Current: 713/180
• CPC Class Codes: H04L 9/3255 using group based signatures, e.g. ring or threshold signatures
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

In a signature generating method where not necessarily all of a plurality of signature generating devices work together each time to generate signatures, the present invention seeks to correctly and securely reflect data relating to previous signatures.

When generating signatures, the data used for the next signature is sent beforehand to the other signature generating devices. Also, when generating signatures, at least one of the devices is used consecutively, thus allowing history data to be shared during signature generation.

Claims

1. A method for sequentially generating digital signatures using n devices, each of said devices equipped with signature generator, said method comprising the steps of:

generating a history data j when generating a j-th digital signature (j≧

1);

storing, in m devices (1≦

m≦

n) out of said n devices involved in an i-th digital signature generating operation, said history data j; and

generating an i-th digital signature i using at least one of the L (1≦

L<

i) stored history data j₁-j_L.

2. A method for generating digital signatures according to claim 1, wherein said history data j is either digital signature j generated by said j-th signature generating operation or is data used when generating said digital signature j generated by said j-th signature generating operation.

3. A method for generating digital signatures according to claim 1,

wherein said step for generating said history data j is performed in one of said m devices involved in an i-th digital signature generating operation.

4. A method for generating digital signatures according to claim 1, said method further comprising in each of said m devices when a digital signature is generated using said m devices:

sending a most recent stored history data to m−

1 other devices,

selecting most recent history data from m units of history data, formed from m−

1 units of history d at a sent by said m−

1 other devices and a most recent history data stored locally, and

using said most recent history data as one of history data used when generating said i-th digital signature.

5. A method for generating digital signatures according to claim 1 wherein:

said step for generating said history data j is performed on one of said n−

m devices;

said step for storing comprises the steps of;

sending, in at least one device of said n−

m devices, said history data j to said m devices; and

storing, in said m devices, said sent history data.

6. A method for generating digital signatures according to claim 1,

wherein a history data (i−

1) and at least one history data k (k<

i−

1) is used as history data used in said step for generating a new i-th digital signature.

7. A method for generating digital signatures according to claim 1, further comprising the step of:

generating an i′

-th digital signature i′

(i′

≠

i, i′

>

j) using the history data used in said step of generating an i-th digital signature.

8. A method for verifying digital signatures generated by using the method according to claim 1, comprising the step of:

confirming that, when verifying said digital signature i, use of a plurality of history data, each of said history data used in said step for generating an i-th digital signature, satisfies a predetermined rule.

9. A method for verifying digital signatures according to claim 8,

wherein said predetermined rule is that all of said plurality of history data is used in said step for generating said i-th digital signature.

10. A method for verifying digital signatures according to claim 8,

wherein said predetermined rule is defined during system operation, during signature generation, or during signature verification.

11. A method for verifying digital signatures generated by using the method according to claim 7, comprising the step of:

confirming that, when verifying said digital signature i, use of a history data i in at least one step for generating digital signature h(h>

i), said history data i is generated in a step for generating said digital signature i, satisfies a predetermined rule.

12. A method for verifying digital signatures according to claim 11,

wherein said predetermined rule is that said history data i is used in all of said steps for generating digital signature h.

13. A method for verifying digital signatures according to claim 11,

wherein said rule is defined during system operation, during signature generation, or during signature verification.