网络与信息安全学报 ›› 2022, Vol. 8 ›› Issue (2): 122-131.doi: 10.11959/j.issn.2096-109x.2022020

• 学术论文 • 上一篇    下一篇

基于SM2联合签名的电子发票公开验证方案

罗玙榕, 曹进, 李晖, 赵兴文, 尚超   

  1. 西安电子科技大学网络与信息安全学院，陕西 西安 710071
  • 修回日期:2022-03-02 出版日期:2022-04-15 发布日期:2022-04-01
  • 作者简介:罗玙榕（1994− ），女，江西吉安人，西安电子科技大学博士生，主要研究方向为无线网络安全、安全方案与协议设计
    曹进（1985− ），男，陕西西安人，博士，西安电子科技大学教授、博士生导师，主要研究方向为 4G/5G 网络、天地一体化网络安全性及认证协议设计与分析
    李晖（1968− ），男，河南灵宝人，博士，西安电子科技大学教授、博士生导师，主要研究方向为密码学、无线网络安全、云计算安全、信息论与编码理论
    赵兴文（1977− ），男，广西玉林人，西安电子科技大学副教授，主要研究方向为基于机器学习的互联网安全应用、隐私保护密码协议、数字签名
    尚超（1997− ），男，山东济南人，西安电子科技大学博士生，主要研究方向为智能汽车内部网络安全、认证协议设计与分析
  • 基金资助:
    国家重点研发计划(2018YFB0803900);陕西省重点研发计划(2020ZDLGY08-08)

Electronic invoice public verification scheme based on SM2 coalition signature algorithm

Yurong LUO, Jin CAO, Hui LI, Xingwen ZHAO, Chao SHANG   

  1. School of Cyber Engineering, Xidian University, Xi’an 710071, China
  • Revised:2022-03-02 Online:2022-04-15 Published:2022-04-01
  • Supported by:
    The National Key Research and Development Program of China(2018YFB0803900);The Key Research and Development Program of Shaanxi(2020ZDLGY08-08)

在线阅读

38

pdf下载

201

摘要：

为解决当前电子发票防伪困难、隐私泄露、验证效率低等问题，针对全程无纸化的电子发票文件，提出了一种基于国密签名算法的电子发票公开验证架构。面向电子发票文件数据来源复杂、票面用户信息敏感、数据流转频繁等特征及电子发票高效公开查验需求，在电子发票服务架构下设计电子发票生成及查验协议，基于无证书联合签名提出发票防伪签名码生成方案，实现开票方与税务主管部门的多重数据核验与签名，支持各类型的发票持有者对电子发票的真伪及数据完整性进行公开查验。融合数据加密算法对电子发票中的用户隐私数据进行保护，同时可满足各类发票应用场景下的真伪或状态验证需求，解决了当前电子发票文件中用户消费信息等敏感数据在传递中泄露的问题，突破了电子发票仅能通过在线系统核对真伪的局限。查验方仅需验证单次签名即可确认开票方及主管部分等双方签名的电子发票真伪性，同时利用公钥加密实现了隐私数据，方案中使用国密算法符合电子发票应用需求。调用Scyther 安全仿真工具对方案安全性进行分析，在各类攻击下可安全验证数据的完整性及来源真实性并保证隐私数据的保密性。在查验计算开销及发票文件数据量两方面，与国外已实行的典型电子发票查验方案及同类型基于数字签名的电子发票查验方案进行对比，所提电子发票公开查验方案在查验效率及发票文件大小等两方面具有明显的优势。

关键词: 电子发票, 公开查验, 国密算法, 无证书签名

Abstract:

In order to solve the current problems of electronic invoices, such as anti-counterfeiting, privacy leakage and low verification efficiency, an electronic invoice public verification architecture based on the national signature algorithm was proposed.Electronic invoice documents have complex data sources, sensitive user information on the ticket surface, frequent data flow and other characteristics as well as the demand for efficient public verification.Based on these motivations, the e-invoice generation and verification protocol was designed.Besides, a signature code generation scheme for invoice anti-counterfeiting was proposed based on certificate-free joint signature.Then multiple data verification and signatures of the invoicing party and the taxation authority can be realized.All kinds of invoice holders can not only verify the authenticity and data integrity of electronic invoices, but also publicly check the authenticity and data integrity of electronic invoices.The integration of data encryption algorithms protects user privacy data in electronic invoices, and at the same time can fulfill the requirements for authenticity or status verification under various invoice application scenarios.The checking party only needs to verify one signature to confirm the authenticity of the electronic invoice signed by both parties.Scyther security simulation tools were used to analyze the security of the proposed solution, which can verify the integrity and authenticity of the data source and check the confidentiality of the privacy data under various types of attacks.Compared with a typical overseas e-invoice checking scheme and a similar digital signature-based e-invoice checking scheme, the proposed scheme has obvious advantages in terms of checking efficiency and invoice file size.

Key words: electronic invoice, public verification, national cryptographic algorithms, certificateless signature

中图分类号: 

No Suggested Reading articles found!