基于SM2联合签名的电子发票公开验证方案

罗玙榕; 曹进; 李晖; 赵兴文; 尚超

doi:10.11959/j.issn.2096-109x.2022020

您当前的位置：

首页 >

文章列表页 >

基于SM2联合签名的电子发票公开验证方案

学术论文 | 更新时间：2024-06-03

- 基于SM2联合签名的电子发票公开验证方案
- Electronic invoice public verification scheme based on SM2 coalition signature algorithm
- 网络与信息安全学报 2022年8卷第2期页码：122-131
- 作者机构：
- 作者简介：
  
  [ "罗玙榕（1994− ），女，江西吉安人，西安电子科技大学博士生，主要研究方向为无线网络安全、安全方案与协议设计" ]
  [ "曹进（1985− ），男，陕西西安人，博士，西安电子科技大学教授、博士生导师，主要研究方向为 4G/5G 网络、天地一体化网络安全性及认证协议设计与分析" ]
  [ "李晖（1968− ），男，河南灵宝人，博士，西安电子科技大学教授、博士生导师，主要研究方向为密码学、无线网络安全、云计算安全、信息论与编码理论" ]
  [ "赵兴文（1977− ），男，广西玉林人，西安电子科技大学副教授，主要研究方向为基于机器学习的互联网安全应用、隐私保护密码协议、数字签名" ]
  [ "尚超（1997− ），男，山东济南人，西安电子科技大学博士生，主要研究方向为智能汽车内部网络安全、认证协议设计与分析" ]
- 基金信息：
  
  国家重点研发计划;The National Key Research and Development Program of China(2018YFB0803900);陕西省重点产业创新链（群）-工业领域项目;The National Natural Science Foundation of China(2020ZDLGY08-08)
- DOI：10.11959/j.issn.2096-109x.2022020
  中图分类号： TP393
- 网络首发：2022-04，
  
  纸质出版：2022-04-15
- 稿件说明：
移动端阅览
罗玙榕, 曹进, 李晖, 等. 基于SM2联合签名的电子发票公开验证方案[J]. 网络与信息安全学报, 2022,8(2):122-131.

Yurong LUO, Jin CAO, Hui LI, et al. Electronic invoice public verification scheme based on SM2 coalition signature algorithm[J]. Chinese Journal of Network and Information Security, 2022, 8(2): 122-131.
罗玙榕, 曹进, 李晖, 等. 基于SM2联合签名的电子发票公开验证方案[J]. 网络与信息安全学报, 2022,8(2):122-131. DOI： 10.11959/j.issn.2096-109x.2022020.

Yurong LUO, Jin CAO, Hui LI, et al. Electronic invoice public verification scheme based on SM2 coalition signature algorithm[J]. Chinese Journal of Network and Information Security, 2022, 8(2): 122-131. DOI： 10.11959/j.issn.2096-109x.2022020.

摘要

为解决当前电子发票防伪困难、隐私泄露、验证效率低等问题，针对全程无纸化的电子发票文件，提出了一种基于国密签名算法的电子发票公开验证架构。面向电子发票文件数据来源复杂、票面用户信息敏感、数据流转频繁等特征及电子发票高效公开查验需求，在电子发票服务架构下设计电子发票生成及查验协议，基于无证书联合签名提出发票防伪签名码生成方案，实现开票方与税务主管部门的多重数据核验与签名，支持各类型的发票持有者对电子发票的真伪及数据完整性进行公开查验。融合数据加密算法对电子发票中的用户隐私数据进行保护，同时可满足各类发票应用场景下的真伪或状态验证需求，解决了当前电子发票文件中用户消费信息等敏感数据在传递中泄露的问题，突破了电子发票仅能通过在线系统核对真伪的局限。查验方仅需验证单次签名即可确认开票方及主管部分等双方签名的电子发票真伪性，同时利用公钥加密实现了隐私数据，方案中使用国密算法符合电子发票应用需求。调用Scyther 安全仿真工具对方案安全性进行分析，在各类攻击下可安全验证数据的完整性及来源真实性并保证隐私数据的保密性。在查验计算开销及发票文件数据量两方面，与国外已实行的典型电子发票查验方案及同类型基于数字签名的电子发票查验方案进行对比，所提电子发票公开查验方案在查验效率及发票文件大小等两方面具有明显的优势。

Abstract

In order to solve the current problems of electronic invoices

such as anti-counterfeiting

privacy leakage and low verification efficiency

an electronic invoice public verification architecture based on the national signature algorithm was proposed.Electronic invoice documents have complex data sources

sensitive user information on the ticket surface

frequent data flow and other characteristics as well as the demand for efficient public verification.Based on these motivations

the e-invoice generation and verification protocol was designed.Besides

a signature code generation scheme for invoice anti-counterfeiting was proposed based on certificate-free joint signature.Then multiple data verification and signatures of the invoicing party and the taxation authority can be realized.All kinds of invoice holders can not only verify the authenticity and data integrity of electronic invoices

but also publicly check the authenticity and data integrity of electronic invoices.The integration of data encryption algorithms protects user privacy data in electronic invoices

and at the same time can fulfill the requirements for authenticity or status verification under various invoice application scenarios.The checking party only needs to verify one signature to confirm the authenticity of the electronic invoice signed by both parties.Scyther security simulation tools were used to analyze the security of the proposed solution

which can verify the integrity and authenticity of the data source and check the confidentiality of the privacy data under various types of attacks.Compared with a typical overseas e-invoice checking scheme and a similar digital signature-based e-invoice checking scheme

the proposed scheme has obvious advantages in terms of checking efficiency and invoice file size.

关键词

Keywords

references

中国互联网络信息中心 . 第45次《中国互联网络发展状况统计报告》 [EB ] .

China Internet Network Information Center . The 45th statistical report on china's internet development [EB ] .

柴跃廷 , 于潇 , 黄亚东 . 电子发票管理与公共服务体系设计与实现 [J ] . 清华大学学报(自然科学版) , 2018 , 58 ( 6 ): 598 - 602 .

CHAI Y T , YU X , HUANG Y D . Electronic invoice management and public service system [J ] . Journal of Tsinghua University (Science and Technology) , 2018 , 58 ( 6 ): 598 - 602 .

TANG P , QIU W D , HUANG Z , et al . Anomaly detection in electronic invoice systems based on machine learning [J ] . Information Sciences , 2020 , 535 : 172 - 186 .

梁又升 . 某市税务发票真伪查询系统的设计与实现 [D ] . 西安:电子科技大学 , 2018 .

LIANG Y S . Design and implementation of a city tax invoice authenticity query system [D ] . Xi’an:University of Electronic Science and Technology of China , 2018 .

ILKNUR G N , . Technical and communicational standards of e-invoicing:a country example:turkey [C ] // IEEE International Conference on Application of Information and Communication Technologies (AICT) . 2016 .

谢绒娜 , 毛卫华 , 史国振 . 基于签名认证的电子发票真伪性验证方案 [J ] . 网络与信息安全学报 , 2019 , 5 ( 6 ): 105 - 112 .

XIE R N , MAO W H , SHI G Z . E-invoice authenticity verification scheme based on signature verification [J ] . Chinese Journal of Network and Information Security , 2019 , 5 ( 6 ): 105 - 112 .

FERREIRA L , CONSTANTE L , BRAGA Z , et al . ISO 27001 certification process of electronic invoice in the state of minas gerais [C ] // International Carnahan Conference on Security Technology . 2014 .

ŠPANIĆ D , RISTIĆ D , VRDOLJAK B , . An electronic invoicing system [C ] // IEEE International Conference on Telecommunications . 2011 : 149 - 156 .

SUN Y , MAO X , HONG S , et al . Template matching-based method for intelligent invoice information identification [J ] . IEEE Access , 2019 , 7 : 28392 - 28401 .

ISO/IEC 15415:2004(E) Information technology—automatic identification and data capture techniques—bar code print quality test specification—two-dimensional symbols [S ] . Switzerland:International Organization for Standardization , 2004 .

魏巍 , 和红杰 , 陈帆 . 基于块分类编码的电子发票图像自恢复水印算法 [J ] . 应用科学学报 , 2016 , 34 ( 5 ): 490 - 502 .

WEI W , HE H J , CHEN F . Self-recovery watermarking for e-invoice image based on block classification and RS coding [J ] . Journal of Applied Sciences , 2016 , 34 ( 5 ): 490 - 502 .

NGUYEN V C , PHAM H L , TRAN T H , et al . Digitizing invoice and managing VAT payment using blockchain smart contract [C ] // 2019 IEEE International Conference on Blockchain and Cryptocurrency (ICBC) . 2019 .

ZHANG Y , XIE C , MA X . Blockchain for smart city-public service integration by strategic alliance [J ] . International Journal of Simulation and Process Modelling , 2020 , 15 ( 4 ): 358 - 368 .

UNE-EN 16931-1-2019 Electronic invoicing - part 1:semantic data model of the core elements of an electronic invoice [S ] . Spain:ES-AENOR , 2019 .

GB/T 32918 . 1-2016 信息安全技术 SM2 椭圆曲线公钥密码算法第1部分：总则 [S ] . 中国:全国信息安全标准化技术委员会 , 2017 .

GB/T 32918 . 1-2016 Information security technology—public key cryptographic algorithm SM2 based on elliptic curves—part 1:general [S ] . China:National Information Security Standardization Technical Committee , 2017 .

程朝辉 . 基于SM2的无证书加密算法 [J ] . 密码学报 , 2021 , 8 ( 1 ): 87 - 95 .

CHENG Z H . Certificateless public key encryption based on SM2 [J ] . Journal of Cryptologic Research , 2021 , 8 ( 1 ): 87 - 95 .

GB/T 32918 . 2-2016 信息安全技术 SM2椭圆曲线公钥密码算法第 2 部分:数字签名算法 [S ] . 中国:全国信息安全标准化技术委员会 , 2017 .

GB/T 32918 . 2-2016 information security technology—public key cryptographic algorithm SM2 based on elliptic curves—part 2:digital signature algorithm [S ] . China:National Information Security Standardization Technical Committee , 2017 .

CREMERS C . The Scyther tool [R ] . University of Oxford,Department of Computer Science , 2006 .

CREMERS C , MAUW S . Operational semantics and verification of security protocols [M ] // Information Security and Cryptography . Berlin : Springer , 2012 .

DOLEV D , YAO C C . On the security of public key protocols [C ] // Symposium on Foundations of Computer Science . 1981 .

浏览量

257

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

几个无证书签名方案的伪造攻击

基于签名认证的电子发票真伪性验证方案