中圖分類號：TP393 文獻標志碼：A DOI: 10.16157/j.issn.0258-7998.223507
中文引用格式： 于艷艷，李智虎，涂因子，等. 基于區(qū)塊鏈的分布式標識密碼管理[J]. 電子技術(shù)應用，2023，49(8)：98-102.
英文引用格式： Yu Yanyan，Li Zhihu，Tu Yinzi，et al. Blockchain-based distributed identity-based cryptography key management[J]. Application of Electronic Technique，2023，49(8)：98-102.

Blockchain-based distributed identity-based cryptography key management

Abstract： The identity-based cryptography algorithm such as SM9, requires a trusted third party key generation center KGC to generate the user′s identity private key, which will be faced with the risks and problems of key escrow and single point failure. This paper proposes a distributed identity-based cryptography key management scheme. Several participants generate partial identity private key to the user, and the user locally generates its own identity private key, avoiding the key escrowing problem. Meanwhile, the data such as identity status and other data can be uploaded to the blockchain. It can be used to decentralize the query of user′s identity and validity, solve the single point failure and trust problem of single KGC, and improve the system availability and security. The results show that the proposed scheme has obvious advantages in terms of efficiency and bandwidth requirements.

Key words : identity-based cryptography；SM9；key generation；distributed computation；blockchain