Message authorization system for authorizing message for electronic document

• US 5,963,649 A
• Filed: 12/17/1996
• Issued: 10/05/1999
• Est. Priority Date: 12/19/1995
• Status: Expired due to Fees

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Sako, Kazue
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/767,633
• Time in Patent Office: 1,022 Days
• Field of Search: 380/23, 380/25, 380/30, 380/49, 380/50, 380/59
• US Class Current: 713/168
• CPC Class Codes: H04L 9/3221 interactive zero-knowledge proofs
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A message authorization system in which a sender sub-system and a verifier sub-system each have inherent secret information and inherent public information set corresponding to the secret information, the sender sub-system including an authorization data producing unit for producing authorization data dependent on the public information of the verifier sub-system and the secret information of the sender sub-system, and the verifier sub-system including a data verification unit for verifying authorization data received jointly with an electronic document from the sender sub-system based on the public information of the sender sub-system.

Claims

1. A message authorization system for conducting message authorization of an electronic document comprising:

a sender sub-system that adds authorization data and sends the electronic document; and

a verifier sub-system that ascertains a validity of the authorization data,

wherein said sender sub-system and said verifier sub-system each having an inherent secret key and an inherent public key corresponding to the secret key,

said sender sub-system including authorization data producing means for producing said authorization data dependent on the public key of said verifier sub-system and the secret key of said sender sub-system, and

said verifier sub-system including data verifying means for verifying said authorization data received from said sender sub-system based on the public key of said sender sub-system.

2. The message authorization system as set forth in claim 1, wherein

said authorization data producing means of said sender sub-system produces a chameleon commitment dependent on the public key of said verifier sub-system and produces said authorization data based on the chameleon commitment, and

said data verifying means of said verifier sub-system verifies said authorization data based on a chameleon commitment included in said authorization data.

3. The message authorization system as set forth in claim 1, wherein

said authorization data producing means of said sender sub-system comprising:

chameleon commitment producing means for producing a chameleon commitment based on the public key of said verifier sub-system, and a first arbitrary random number of said sender sub-system,

first data producing means for producing first partial authorization data based on the public key and a second arbitrary random number of said sender sub-system,

challenge producing means for producing a challenge based on said chameleon commitment and said first partial authorization data, and

second data producing means for producing second partial authorization data based on said challenge and the secret key of said sender sub-system, and

said authorization data producing means sends said chameleon commitment, said first partial authorization data, said second partial authorization data and the value of said first arbitrary random number used in the production of said chameleon data, as authorization data, to said verifier sub-system, and

wherein said data verifying means of said verifier sub-system comprising;

chameleon commitment restoring means for restoring a random number based on the public key of said verifier sub-system, said chameleon commitment and said first arbitrary random number value included in said authorization data,

challenge restoring means for restoring said challenge based on said restored random number and said first partial authorization data, and

data ascertaining means for verifying said authorization data based on said restored challenge, said first and second partial authorization data and the public key of said sender sub-system.

4. The message authorization system as set forth in claim 1, wherein

said authorization data producing means of said sender sub-system comprising:

first data producing means for producing first partial authorization data based on the public key and a first arbitrary random number of said sender sub-system,

chameleon commitment producing means for producing a chameleon commitment based on said first partial authorization data, and the public key of said verifier sub-system and a second arbitrary random number of said sender sub-system,

challenge producing means for producing a challenge based on said chameleon commitment, and

second data producing means for producing second partial authorization data based on said challenge and the secret key of said sender sub-system, and

wherein said authorization data producing means sends said chameleon commitment, said second partial authorization data and the value of said first arbitrary random number used in the production of said chameleon data, as authorization data, to said verifier sub-system, and

said data verifying means of said verifier sub-system comprising;

chameleon commitment restoring means for restoring said first partial authorization data based on the public key of said verifier sub-system, said chameleon commitment and said second arbitrary random number value included in said received authorization data,

challenge restoring means for restoring said challenge based on said chameleon commitment, and

data ascertaining means for verifying said authorization data based on said restored challenge, said restored first partial authorization data, said second partial authorization data and the public key of said sender sub-system.

5. The message authorization system as set forth in claim 1, wherein the public key of said sender sub-system and the public key of said verifier sub-system are open to the public by a predetermined means so as to be accessible irrespective of transmission and reception of said electronic document and said authorization data.

6. The message authorization system as set forth in claim 1, wherein the public key of said sender sub-system and the public key of said verifier sub-system are open to the public by a predetermined means so as to be accessible irrespective of transmission and reception of said electronic document and said authorization data,

said authorization data producing means of said sender sub-system produces a chameleon commitment dependent on the public key of said verifier sub-system and produces said authorization data based on the chameleon commitment, and

said data verifying means of said verifier sub-system verifies said authorization data based on the chameleon commitment included in said authorization data.

7. The message authorization system as set forth in claim 1, wherein the public key of said sender sub-system and the public key of said verifier sub-system are open to the public by a predetermined means so as to be accessible irrespective of transmission and reception of said electronic document and said authorization data,

said authorization data producing means of said sender sub-system comprising:

chameleon commitment producing means for producing a chameleon commitment based on the public key of said verifier sub-system, and a first arbitrary random number of said sender sub-system,

first data producing means for producing first partial authorization data based on the public key and a second arbitrary random number of said sender sub-system,

challenge producing means for producing a challenge based on said chameleon commitment and said first partial authorization data, and

second data producing means for producing second partial authorization data based on said challenge and the secret key of said sender sub-system, and

said authorization data producing means sends said chameleon commitment, said first partial authorization data, said second partial authorization data and the value of said first arbitrary random number used in the production of said chameleon data, as authorization data, to said verifier sub-system, and

said data verifying means of said verifier sub-system comprising;

chameleon commitment restoring means for restoring a random number based on the public key of said verifier sub-system, said chameleon commitment and said first arbitrary random number value included in said authorization data,

challenge restoring means for restoring said challenge based on said restored random number and said first partial authorization data, and

data ascertaining means for verifying said authorization data based on said restored challenge, said first and second partial authorization data and the public key of said sender sub-system.

8. The message authorization system as set forth in claim 1, wherein

the public key of said sender sub-system and the public key of said verifier sub-system are open to the public by a predetermined means so as to be accessible irrespective of transmission and reception of said electronic document and said authorization data,

said authorization data producing means of said sender sub-system comprising:

first data producing means for producing first partial authorization data based on the public key and a first arbitrary random number of said sender sub-system,

chameleon commitment producing means for producing a chameleon commitment based on said first partial authorization data, the public key of said verifier sub-system and a second arbitrary random number of said sender sub-system,

challenge producing means for producing a challenge based on said chameleon commitment, and

second data producing means for producing second partial authorization data based on said challenge and the secret key of said sender sub-system, and

said authorization data producing means sends said chameleon commitment, said second partial authorization data and the value of said second arbitrary random number used in the production of said chameleon data, as authorization data, to said verifier sub-system, and

said data verifying means of said verifier sub-system comprising;

chameleon commitment restoring means for restoring said first partial authorization data based on the public key of said verifier sub-system, said chameleon commitment and said second arbitrary random number value included in said received authorization data,

challenge restoring means for restoring said challenge based on said chameleon commitment, and

data ascertaining means for verifying said authorization data based on said restored challenge, said restored first partial authorization data, said second partial authorization data and the public key of said sender sub-system.

9. A message authorization system for implementing signing by adding signature data to an electronic document comprising:

a sender sub-system for adding the signature data and sending the electronic document; and

a verifier sub-system that verifies the signature data,

wherein said sender sub-system and said verifier sub-system each having an inherent secret key and an inherent public key corresponding to the secret key,

said sender sub-system comprising;

signature data producing means for producing signature data dependent on the secret key of said sender, and

verification data producing means for producing said verification data dependent on the public key of said verifier sub-system and the secret key of said sender sub-system, and

said verifier sub-system comprising;

data verifying means for verifying said signature data applied to said electronic document based on said verification data received from said sender sub-system and the public key of said sender sub-system.

10. The message authorization system as set forth in claim 9, wherein

said verification data producing means of said sender sub-system produces a chameleon commitment dependent on the public key of said verifier sub-system and produces said verification data based on the chameleon commitment, and

said data verifying means of said verifier sub-system restores predetermined key based on a chameleon commitment included in said verification data and verifies said signature data based on the restored key, said verification data and the public key of said sender sub-system.

11. The message authorization system as set forth in claim 9, wherein

said verification data producing means of said sender sub-system comprising:

chameleon commitment producing means for producing a chameleon commitment based on the public key of said verifier sub-system, and a first arbitrary random number of said sender sub-system,

first data producing means for producing first partial verification data based on the public key and a second arbitrary random number of said sender sub-system,

challenge producing means for producing a challenge based on said chameleon commitment and said first partial verification data, and

second data producing means for producing second partial verification data based on said challenge and the secret key of said sender sub-system, and

said verification data producing means sends said chameleon commitment, said first partial verification data, said second partial verification data and the value of said first arbitrary random number used in the production of said chameleon data, as verification data, to said verifier sub-system, and

said data verifying means of said verifier sub-system comprising;

chameleon commitment restoring means for restoring a random number based on the public key of said verifier sub-system, said chameleon commitment and said first arbitrary random number value included in said received authorization data,

challenge restoring means for restoring said challenge based on said restored random number, said chameleon commitment and said first partial verification data, and

data ascertaining means for verifying said signature data based on said restored challenge, said first and second partial verification data and the public key of said sender.

12. The message authorization system as set forth in claim 9, wherein the public key of said sender sub-system and the public key of said verifier sub-system are open to the public by a predetermined means so as to be accessible irrespective of transmission and reception of said electronic document with said signature data applied.

13. The message authorization system as set forth in claim 9, wherein

the public key of said sender sub-system and the public key of said verifier sub-system are open to the public by a predetermined means so as to be accessible irrespective of transmission and reception of said electronic document with said signature data applied,

said verification data producing means of said sender sub-system produces a chameleon commitment dependent on the public key of said verifier sub-system and produces said verification data based on the chameleon commitment, and

said data verifying means of said verifier sub-system restores predetermined information based on the chameleon commitment included in said verification data and verifies said signature data based on the restored information, said verification data, and the public key of said sender sub-system.

14. The message authorization system as set forth in claim 9, wherein

the public key of said sender sub-system and the public key of said verifier sub-system are open to the public by a predetermined means so as to be accessible irrespective of transmission and reception of said electronic document with said signature data applied,

said verification data producing means of said sender sub-system comprising:

chameleon commitment producing means for producing a chameleon commitment based on the public key of said verifier sub-system, a first arbitrary random number of said sender sub-system,

first data producing means for producing first partial verification data based on the public key and a second arbitrary random number of said sender sub-system,

a challenge producing means for producing a challenge based on said chameleon commitment and said first partial verification data, and

second data producing means for producing second partial verification data based on said challenge and the secret key of said sender sub-system, and

said verification data producing means sends said chameleon commitment, said first partial verification data, said second partial verification data and the value of said second arbitrary random number used in the production of said chameleon data, as verification data, to said verifier sub-system, and

said data verifying means of said verifier sub-system comprising;

chameleon commitment restoring means for restoring a random number bit based on the public key of said verifier sub-system, and said chameleon commitment and said second arbitrary random number value included in said received authorization data,

challenge restoring means for restoring said challenge based on said restored random number bit, said chameleon commitment, and said first partial authorization data, and

data ascertaining means for verifying said signature data based on said restored challenge, said first and second partial authorization data and the public key of said sender sub-system.