CPK Public Key and Its Basic Functions

Xianghao Nan

CPK Laboratory, Beijing, China.

DOI: 10.4236/oalib.1108287                

Abstract

This paper introduces the working principle of CPK (Combined Public Key) and the general method of constructing identifier-based public key, which can not only solve the problem of key distribution, but also solve the authentication problem of identifier claimed by the subject. As basic functions, identifier authentication, identifier password, digital signature and key encryption are introduced. Where Identifier authentication is a new concept, and a separate authentication protocol is formulated to prove the authenticity of identifier. Identifier password is an asymmetric password, constructed with identifier authentication technique which can not only identify the authenticity of password, but also prove the authenticity of the subject, and prevent illegal access and DOS attacks. Digital signature is based on identifier authentication, which makes DSS become the digital signature standard in real sense. The key encryption implements encrypted communication between any two points on the open public network, reducing the closing segmentation granularity to the sender and receiver, making the extra regional segmentation redundant.

Keywords

Authentication, Digital Signature, Password, Encryption

1. Introduction

In modern public key system, public-key distribution has been a difficult problem. In 1984, Shamir first proposed the concept that identifier can directly be taken as a public-key [1], and constructed an identifier-based public key scheme IBS with factor decomposition. Even though it didn’t work out, it pointed out the direction for the development of public key system. CPK (Combined Public Key) [2] is a general approach to transform existing public key schemes into identifier-based public key schemes.

Now CPK has formed into a large family, including CPK-_RSA based on factor decomposition problem, CPK-_DLP based on discrete logarithm problem, CPK-_ECC based on elliptic curve problem, CPK-_CCC based on conic curve [3], CPK-_BLP based on bilinear pairing, etc., where the signature code of CPK-_ECC is the shortest.

Later, it is found that the identifier-based public key can not only solve the problem of public-key distribution, but also solve the problem of subject authenticity proof, which has been the core technology of cyber security.

The following takes CPK-_ECC as an example to introduce the original type and smart type of CPK.

2. CPK Original Type

2.1. Combining Principle

CPK-_ECC is constructed on ECC [4] [5] over field Fp, $\text{E}:y^{\text{2}}=\left(x^{\text{3}}+ax+b\right)\mathrm{mod}p$, the parameters are denoted as (a, b, G, n, p), in which a, b is coefficient, $a,b,x,y\in \text{F}p$, p is prime, G is the base point of the addition group, n is the order of group generated by base point G. Let an arbitrary integer $r\in \text{F}n$ be a private-key, then the point, rG = R, is the corresponding public-key. The ECC has a compounding feature: the sum of public-keys and the sum of corresponding private-keys are still the valid key pairs. For example, if the sum of private-keys is:

$r=\left(r_1+r_2+\cdots +r_m\right)\mathrm{mod}n$

and the sum of corresponding public-keys will be

$R=R_{\text{1}}+R_{\text{2}}+\cdots +R_m$

then (r, R) will be a new key pair. This is because

$\begin{array}{c}R=R_{\text{1}}+R_{\text{2}}+\cdots +R_m=r_{\text{1}}G+r_{\text{2}}G+\cdots +r_{m}G\\ =\left(r_{\text{1}}+r_{\text{2}}+\cdots +r_m\right)G=rG\end{array}$

In the same way, if a given integer is less than n, the following formula is established:

r and R are a pair of keys, if k times of r is the new private-key s, then the k times of R is the corresponding public-key:

$k\ast r=s;k\ast R=S$

If the private-key r plus k is t, then R plus K is the new public-key T:

$r+k=t;R+K=T\left(K=k\ast G\right)$

2.2. Combination Matrix

Combining-Matrix is divided into private matrix and public matrix, and is denoted as (r_i,j) and (R_i,j) respectively, where r is hx32 random integers less than n, and not all linear independent. Matrix (r_i,j) is kept secret only in key management ceter(KMC), and is used to produce private-keys for individual entity. The public matrix (R_i,j) is derived from private matrix (r_i,j), the relation is r_i,j×G = R_i,j.

Private Matrix(a) Public Matrix(A)

$\text{a}=\left(\begin{array}{cccc}{r}_{0,0}& r_{0,1}& \cdots & r_{0,31}\\ r_{1,0}& r_{1,1}& \cdots & r_{1,31}\\ ⋮& ⋮& \ddots & ⋮\\ r_{h,0}& r_{h,1}& \cdots & r_{h,31}\end{array}\right)$ _{$\text{A}=\left(\begin{array}{cccc}{R}_{0,0}& R_{0,1}& \cdots & R_{0,31}\\ R_{1,0}& R_{1,1}& \cdots & R_{1,31}\\ ⋮& ⋮& \ddots & ⋮\\ R_{h,0}& R_{h,1}& \cdots & R_{h,31}\end{array}\right)$}

Public matrix is distributed to every entity and used to compute the public-key of relying party.

2.3. Key Combination

The key management center defines the Hash key Hkey. The given identifier is hashed to YS sequence under Hkey, to take the matrix size 32 × 32 as example:

$\text{YS}={\text{Hash}}_{\text{Hkey}i}\left(\text{Identifier}\right)=v_0,v_{\text{1}},v_{\text{2}},\cdots ,v_{\text{31}}$ ;

Row coordinates of the matrix are indicated by v_i, and column ordinates are used in natural order. Alice’s key pair are combined as

${\text{Alice}}_{sk}={\displaystyle {\sum }_{i=0}^{31}{r}_{\left[v_i,i\right]}}\mathrm{mod}n=alice$

${\text{Alice}}_{PK}={\displaystyle {\sum }_{i=0}^{31}{R}_{\left[v_i,i\right]}}=ALICE$

2.4. Open Problem

In 2003, the release of CPK aroused strong response and high attention at home and abroad, and set off an upsurge across the country. Since the private-key is a linear combination of matrix variables, linear equations can be listed. Since it was not so assrued, the matrix size is given h × 32 (h = 32..1024). By algebraic theorem, linear equations have solutions, and when linear dependent equations have infinite solutions, it is nothing to do with collusion, but linear independent equations with full rank, have unique solutions, whereas linear independent equations are not easy to construct, while linear dependent equations are easy to construct. It had been an open problem. In 2006, the competent authority suddenly came to the opposite conclusion: “Linear correlation of equations leads to collusion,” and launched a nationwide crackdown in an attempt to kill it with one stick.

Despite the harsh environment, the research work did not stop. In the study, it was also found that CPK has countless equivalent matrices, but it was not clear whether harmful. In order to change the static matrix into the dynamic matrix, a hierarchy parameter fcc and annual key year were set in the improved CPK [6]. As the fcc of each user is different, each user uses the matrix at different levels. The method is to generate v₃₂ as hierarchy parameter fcc in the mapping sequence:

$\text{YS}={\text{Hash}}_{\text{Hkey}}\left(\text{Alice}\right)=v_0.v_{\text{1}},v_{\text{2}},\cdots ,v_{\text{31}},v_{\text{32}}$ ; $fcc:=v_{\text{32}}$

${\text{Alice}}_{sk}=\left({\displaystyle {\sum }_{i=0}^{31}{r}_{\left[v_i,i\right]}}\right)\times fcc+year\mathrm{mod}n=alice$

In the numerous equivalent matrices, if a linear independent equivalent matrix is found, the equation can have a unique solution. This is an amazing new idea. Sure enough, Liao Guohong et al. [7] constructed an equivalent linear independent matrix with a size of 32 × 32 based on the original type of CPK, and solved the equivalent private matrix with 3000 private-keys. Thanks to the results of Liao Guohong et al., It should be recognized that this is the defect of CPK, however, when the matrix was expanded to 512 × 32, the equivalent matrix method was helpless. The collusion “led” by linear dependent equation and the collusion solved by linear independent of equivalence matrix do not belong to the same concept, should not be confused.

So can the hierarchical parameter prevent linear attack of the equivalent matrix? The answer is not, because when fcc is a single variable, it is easy to be canceled out in elimination operation. If a number of mutually related hierarchy parameters are set up to protect each other from cancellation, the equations becomes a mixture of matrix equations and coefficient equations, whereas, the correlation of coefficient equations is obvious, which can ensure the correlation of the two equations:

$\text{YS}={\text{Hash}}_{\text{Hkey}}\left(\text{Alice}\right)=v_0.v_{\text{1}},\cdots ,v_{\text{16}},v_{\text{17}},\cdots ,v_{32},v_{\text{33}}$ ; $fc{c}_{\text{1}}:=v_{\text{17}}$ , $fc{c}_{\text{2}}:=v_{\text{33}}$

$Alic{e}_{sk}=\left(\left({\displaystyle {\sum }_{i=0}^{15}{r}_{\left[v_i,i\right]}\times fc{c}_1}\right)+\left({\displaystyle {\sum }_{i=17}^{32}{r}_{\left[v_i,i\right]}\times fc{c}_2}\right)+year\right)\mathrm{mod}n=alice$

New things are unlikely to be mature and in the discussion on open issues, CPK has received strong support from domestic and foreign counterparts, which is the motivation for CPK to continue to take root and sprout during the decade-long ban. In 2017, it was coincided with a change of leadership of competent authority, the new leader has put an end to the mistakes of his predecessor. So CPK began to see the light.

3. CPK Smart Type

With the rise of the industrial Internet, new problems arise. Industrial internet is composed of backbone network and enterprise network. The backbone network is the global network, which mainly transmits information, while the enterprise network is the local network, which mainly transmits signals. The combination matrix of CPK original type is too large, which can only meet the information authentication requirements of intelligent terminals, but cannot meet the signal authentication requirements of non-intelligent devices. Therefore, it is necessary to design a smart CPK that can adapt to the needs of global information system as well as regional signal system.

3.1. Combination Matrix

The matrix size is defined by h × h, where h is equal to 4 and 8. The private matrix (r_i,j) is kept by KMC for the generation of private-keys, while the public matrix (R_i,j) is kept by each client for the computation of public-keys. The public matrix of 4 × 4 matrix and 8 × 8 matrix can be configured at the same time, or can be configured separately.

The published public matrix is signed by the Key Management Center (KMC) to determine the scope:

$\text{Hash}{\left(R_{i,j}\right)}_{\text{4}\times \text{4}}\to h\text{1}$ ; $\text{Hash}{\left(R_{i,j}\right)}_{\text{8}\times \text{8}}\to h\text{2}$

${\text{SIG}}_{kmc}\left(h\text{1}\right)=\left(s_{\text{1}},c_{\text{1}}\right)$ ; ${\text{SIG}}_{kmc}\left(h\text{2}\right)=\left(s_{\text{2}},c_{\text{2}}\right)$

3.2. Identifier Mapping

The mapping of the identifier to the matrix coordinates is indicated by the YS sequence, which is the output of the entity’s identifier hashed under the mapping key Hkey.

$\text{YS}={\text{Hash}}_{\text{Hkey}}\left(\text{Alice}\right)=v_{\text{1}},v_{\text{2}},\cdots ,v_k$

YS sequence is output by bytes (8-bit), and each of three variables constitute a unit. The first two variables, v₀ and v₁, are divided into upper and lower halves, after modulo h, indicates the coordinates of row and column of the matrix, and the 0^th and 1^st matrix variables r₀ and r₁ are selected respectively. v₂ is taken as the hierarchy parameter fcc. The sum of matrix variables is multiplied by hierarchy parameters to form cell variables, such as:

$cel{l}_j=\left({\displaystyle {\sum }_{j=0}\left(r_{j\times 3}+r_{j\times 3+1}\right)\times v_{j\times 3+2}}\right)\mathrm{mod}n$

$CEL{L}_j={\displaystyle {\sum }_{j=0}\left(R_{j\times 3}+R_{j\times 3+1}\right)\times v_{j\times 3+2}}$

The lower-case cell_j and r_j are private-key variables, and the upper-case CELL_j and R_i are public-key variables.

3.3. Key Combination

Multi Round Combination

When the matrix size is 4 × 4, the round length is 4, including 2 cell variables in one round, if operating w rounds, then

$roun{d}_k=\left({\displaystyle {\sum }_{k=0}^{w-1}{\displaystyle {\sum }_{j=0}^{1}cel{l}_j}}\right)\mathrm{mod}n$

$ROUN{D}_k={\displaystyle {\sum }_{k=0}^{w-1}{\displaystyle {\sum }_{j=0}^{1}CEL{L}_j}}$

When the matrix size is 8 × 8, the round length is 8, including 4 cell variables in one round, if operating w rounds, then

$roun{d}_k=\left({\displaystyle {\sum }_{k=0}^{w-1}{\displaystyle {\sum }_{j=0}^{3}cel{l}_j}}\right)\mathrm{mod}n$

$ROUN{D}_k={\displaystyle {\sum }_{k=0}^{w-1}{\displaystyle {\sum }_{j=0}^{3}CEL{L}_j}}$

After the multi-round transformation, the annual key is added. The annual private-key “year” is uniformly defined by the center, a global key, and the annual public-key is published. Year_i is a local key defined by the enterprise network.

$S{k}_{Alice}:=\left(round+year\right)\mathrm{mod}n$

$P{K}_{Alice}:=ROUND+YEAR$

3.4. Key Variation

Table 1 lists the relationship between multi-round of operation and variation in the case of various matrix sizes:

Thus it can be seen that the multi-round operation of the private-key expands the limited action scope to “infinite”. two-round of 8 × 8 matrix is equivalent to the variation of 32 × 32 of the original CPK: 32³² = 1.4 × 10⁴⁸.

4. Basic Functions

4.1. Identifier Authentication

Identifier authentication is a new concept that is put forward by the logical world [8]. Nowadays, identifier is separated from identity making the concept clearer. In the physical world, the authenticity of a seal is ensured by engraved real identifier. However, there is no physical medium in the logical world, so how to ensure the authenticity of the identifier is the problem to be solved.

The identifier of the logical world is much more complex than the physical world. The identifier claimed by the subject is a phone number when connecting, the identifiers claimed by subject are IP addresses when sending packets and so on. In the logical world, there are two methods to prove the authenticity of identifier: One is the PKI certification system, in which the proof is implemented by CA certificate, where the third party CA signs to the identifier with digital signature standard DSS [9], therefore, the proof is valid only if the CA is proved to be true. The other is CPK authentication system, in which the proof is implemented by a separate identifier authentication protocol, the authentication is proven by itself.

Identifier authentication code is consisted of check code and proof code.

Check code c is the product of random number k and generator G, where x and y get through one-way function:

$k\ast G=\left(x,y\right);{\left(x+y\right)}^2\mathrm{mod}{2}^{16\text{or}24}\to c$ ;

Proof code s is the product of the inverse of a random number k and the private-key, if and only if there is a one-to-one mapping between the identifier and the private-key:

$k^{-\text{1}}s{k}_{\left[\text{Alice}\right]}\mathrm{mod}n\to s$

Table 1. Variation under different round.

The verification is the product of the inverse of the proof code s and the public-key, if and only if there is a one-to-one mapping between the identifier and the public-key:

$s^{-\text{1}}P{K}_{\left[\text{Alice}\right]}=kG\to c^{\prime }$

If $c=c^{\prime }$, then the public and private keys are real, where the public-key is calculated by the verifier himself from the claimed identifier, in turn, the authenticity of the identifier is proved.

Identifier authentication is the basis of subject authentication and digital signature, but in many cases, identifier authentication is directly used as the subject authentication. The expression of Identifier authentication can be simulated as digital signature of object when object equal to zero (h = 0), and the authentication code is marked with ${\text{SIG}}_{sk\text{-}Alice}\left(0\right)=\left(s,c\right)$, and the verification code is marked with ${\text{VER}}_{PK\text{-}ALICE}\left(0,s\right)=c^{\prime }$.

4.2. Identifier Password

Password is a common method of friend and foe identification, which is very simple and effective. It is also widely used in information systems to establish trust relation between peer entities trying to obtain subject authentication. However, with the development of cyber warfare, password has become the weakest ring. The trust established by password leads to trust-transfer, and the trust-transfer leads to the right-transfer. For example, the password causes the login success, and the successful login can obtain the right to access accounts or files. The existing passwords are fixed, unable to identify or prevent replay attack, vulnerable to DOS attack, and because the passwords are just meaningless random strings, and having the same string is not enough to prove the authenticity of subject. For this reason, some systems adopt multi-factor authentication technique, and put forward a requirement of “never trust, always verify” [10]. However, it is conceivable that multi-factor authentication will not be efficient and it will be difficult to be retained as evidence.

Identifier authentication is independent, and it also has the beforehand nature that it is always carried out before the object authentication. The independence and beforehand nature just has the characteristics that can block the trust transfer by “one thing one proof”, and meets the password requirements of “evidence first, always verify”. But for the replication attack, it only has the ability to identify, but does not have the ability to prevent. The identifier authentication code is changing every time under the effect of random number k, and they can only be the same if the authentication codes are duplicated. Therefore, the duplicated codes can be identified. This is the traditional symmetric password can not do, while the identifier authentication code can not only identify duplicates and but also prevent replications. But the duplicated codes can only be found by comparison, and all used codes must be registered one by one.

If the identifier authentication code is used according to a date, the comparison range can be reduced to a day, and it is feasible to find replication within a day’s registration. The following takes the date 20201123 as an example to explain the method of constructing “Identifier password”:

The private key used for proof is the date added to the private key, the proof code is:

$k^{-\text{1}}\left(s{k}_{\left[\text{Alice}\right]}+\text{2}0\text{2}0\text{1123}\right)\mathrm{mod}n\to s$,

The checking code is:

$kG=\left(x,y\right);{\left(x+y\right)}^{\text{2}}\mathrm{mod}{\text{2}}^{\text{16}}\to c$

The public key used for verification is the public key plus 20201123 * G, and the checking code is:

$s^{-\text{1}}\left(P{K}_{\left[\text{Alice}\right]}+\text{2}0\text{2}0\text{1123}G\right)=kG\to c^{\prime }$.

If $c=c^{\prime }$, the verification passes.

Passwords are proved on the spot, and the date of the password is automatically provided by the terminal device. If the password is not copied on the same day, the authentication will fail. If the verification is successful, then check the replication, and records the passwords that passed authentication for the next comparison.

The authentication of identifier passwords not only prove the authenticity of the password code, but also prove the authenticity of the identifier claimed by the subject. Identifier passwords are different from traditional passwords because they are automatically derived from identifier and do not require manual input, so there is no need to remember. The password length is equal to the key length used, suitable for access information control, remote signal authentication. Copy attack is the main means of DOS attack, identifier password is an effective way to defend against DOS attack.

4.3. Digital Signature

Digital signature is the proof of the authenticity of object by subject. Therefore, a signature without a subject is not a digital signature, because there is no signer, the accountability cannot be fulfilled; and a signature with a subject but not authenticated, it’s not a digital signature either, because the subject can be counterfeited and cannot be used as evidence. In PKI certification system, the signer has a private-key and the verifier obtains the public-key from LDAP, which is certified by a third-party CA, whereas a public key is proven to be someone’s, so if the public- and private-keys are paired, the authenticity of the public key and identifier,are proved, and it can be regarded as a digital signature If the third-party CA’s authenticity can be certificated, However, if the third-party CA’s authenticity cannot be certificated, it cannot be regarded as a real digital signature.

While under the evidence based authentication logic, a signature can only be established on the basis of identifier authentication. Because only the authenticity of the identifier of subject has been proved, can it be qualified to provide authenticity proof for the object. Therefore, the proof of identifier authenticity must be included in every signature. It needs the DSS of trust-based logic to be interpreted in a new way of evidence-based logic.

Signature code consists of proof code and check code.

Check code c is the product of random number k and base point G to get through one-way function variation:

$kG=\left(x,y\right);{\left(x+y\right)}^{\text{2}}\mathrm{mod}{\text{2}}^{\text{16or24}}\to c$ ;

Proof code s is the sum of the identifier proof code and object proof code:

$\left(k^{-\text{1}}h+k^{-\text{1}}s{k}_{\left[\text{Alice}\right]}\right)\mathrm{mod}n\to s$

Where h the feature of an object. The signature function is marked by

${\text{SIG}}_{sk\text{-}alice}\left(h\right)=\left(s,c\right)$

The verification is the sum of identifier check code and object check code:

$s^{-\text{1}}hG+s^{-\text{1}}P{K}_{\left[\text{Alice}\right]}=kG\to c^{\prime }$

Object verification code is the object h and G are multiplied, so that h and hG form a public- and private-key pair. If $c=c^{\prime }$, then the authenticity of identifier and object is proved. Because the public-key used is calculated by the verifier himself from the identifier claimed by the subject, it first proves the authenticity of the identifier of subject, and then proves the authenticity of the object with the verified identifier, so the signature is valid. The verification function is marked by ${\text{VER}}_{PK\text{-}ALICE}\left(h,s\right)=c^{\prime }$.

There are three forms of object existence in digital signature: ontology, slave and target. When the feature of object h is ontology, the signature is the proof of traceability evidence; when h is the feature of slave, the signature is the attribution evidence; when h is the feature of a target, the signature is the responsibility evidence.

The characteristic of digital signature is that a signature proves the authenticity of both the subject and the object simultaneously. Digital signature is used to prove the authenticity of entities and of events. Where the authenticity of the event is divided into the accept process and the adopt process, called ex-ant authentication and ex-post authentication. In some cases, the two processes need to be processed separately. For example, in communication, it is needed to verify the validity of the communication before receiving data to prevent illegal access. The object may be a composite entity, which can be signed individually or signed only once for the composite entity, for example:

$\left(k^{-\text{1}}\left(h_{\text{1}}+\cdots +h_n\right)+k^{-\text{1}}s{k}_{\left[\text{Alice}\right]}\right)\mathrm{mod}n\to s$

Authentication system is an evidence-based proof system that integrates evidence-showing and verification. Evidence provides the basis of verification. Without evidence, verification has no basis. Therefore, the evidence-showing system is the active side, and the verification system is the passive side. The perfection of the authentication system depends on the completeness of the evidence-showing system. Digital signature is the core technology of the evidence-showing system because most of the evidence is provided by digital signature.

4.4. Key Encryption

Key encryption protocol is as follows:

Suppose that Alice sends a encrypted data to Bob: Alice first selects a random number r to calculate the data encryption key:

$r\ast G=\text{key}$

Encrypts the data with the key

${\text{E}}_{\text{key}}\left(\text{data}\right)=\text{code}$

Alice calculates Bob’s public-key PK-BOB, and encrypts the data encrypting key with the public-key:

$r\left(PK\text{-}BOB\right)=\beta$

Key encryption is marked with ${\text{ENC}}_{PK\text{-}BOB}\left(\text{key}\right)=\beta$. Alice sends (code, β) to Bob.

Bob decrypts the key with his private-key:

$\beta {\left(sk\text{-}bob\right)}^{-\text{1}}=r\ast G=\text{key}$

Key decryption is marked with ${\text{DEC}}_{sk\text{-}bob}\left(\beta \right)=\text{key}$. Bob decrypts the data with the key:

${\text{D}}_{\text{key}}\left(\text{code}\right)=\text{data}$.

Key management is the core issue of encryption system, the main task is to create a network that can be closed or opened flexibly. Identifier-based keys bring great convenience to key management, because the public-keys are calculated by the users, so the encrypted communication between any two points can be realized on the public network, reducing the granularity of segmentation from the LAN to the communicating two sides, without the need for additional regional segmentation. However, when a closed secure network is needed, the annual key year1 is set for LAN, so that the whole network can be connected with the annual key Year, ensuring only to be connected within the private network with annual key year1. When the same encrypted message needs to be distributed to several people, it only needs to encrypt the key with the public key of different people. Identifier-based keys in different service can naturally be classified according to different identifiers, no artificial classification of keys is required. No artificial classification of keys is required. Encryption on the public network only needs to meets the requirement of turning secret files into public files. Because data encryption keys are encrypted with public keys, they can also be stored or sent publicly.

5. Summary

After 20 years of development, CPK is still the most simple system that can solve identifier authentication, identifier password, digital signature and key encryption. Where identifier authentication is the basis of digital signature, and only on the basis of identifier authentication can a digital signature be constructed. Digital signature provides evidence of authenticity, traceability, attribution and responsibility, and is the core technology of maintaining Internet order. The signature system of CPK provides a technical basis for the creation of truth logic of authentication [11], which sublimates the traditional authentication logic based on trust to the logic based on evidence, and provides a technical basis for the construction of a GAP universal authentication protocol [12], which elevates the traditional multi-step proof protocol to one-step direct proof protocol.

In the physical world, most of the evidence is provided by seals, and in the logical world, by digital signatures. Digital signature has incomparable advantages over physical seal, and the emergence of two-dimensional code makes digital signature to be digital seal, which is universal in the physical world and the logical world. Therefore, identifier authentication and digital signature will play an important role not only in the logical world, but also in the physical world. It will lead to a new situation where authentication techniques can be used in both the physical and logical worlds.

The arrival of the quantum age raises new problems for the research of digital currency, because the money issued now must still be valid in the quantum age. Under the existing signature protocol, public-keys must be open to the verifier, and public-keys cannot resist quantum exhaustion. Therefore, we can only seek a new way that even a public key is broken, it does not have any significance, therefore, CPK time type has been designed adopting one-time signature mechanism, which is easy to detect the crime using the cracked private-key.

Internet is a great invention, the common wealth of mankind and a platform for the exchange of human wisdom. Maintaining order on the Internet is the common responsibility of every user. Through the study of CPK, it is seemed to have seen a bit of hope, and expected a common effort of colleagues to promote the development of cyber security.

Conflicts of Interest

The author declares no conflicts of interest.

References

[1]	Shamir, A. (1984) Identity-Based Cryptosystems and Signature Schemes. Advances in Cryptology, 21, 47-53. https://doi.org/10.1007/3-540-39568-7_5
[2]	Nan, X.H. and Chen, Z. (2003) Profile to Network Security. Publishing House of Defense Industry.
[3]	Yu, M.Y., Huang, X.P., Jiang, L., et al. (2008) Combined Public Key Cryptosystem Based on Conic Curves over the Ring Zn. 2008 International Conference on Computer Science and Software Engineering, Wuhan, 12-14 December 2008, 631-634. https://doi.org/10.1109/CSSE.2008.542
[4]	(2000) Standard for Efficient Cryptography. SEC1: Elliptic Curve Cryptography.
[5]	(2000) Standard for Efficient Cryptography. SEC2: Elliptic Curve Cryptography.
[6]	Nan, X.H. (2021) New Progress in CPK Public Key. Open Access Library Journal, 8, 1-6. https://doi.org/10.4236/oalib.1107440
[7]	Liao, G.H., et al. (2016) linear Collusion Attack to CPK, Computer Application and Software.
[8]	Nan, X.H. (2006) CPK Identifier Authentication. Publishing House of Defense Industry.
[9]	(1994) Digital Signature Standards, National Institute of Standards and Technology. NIST PUB 186, U.S. Department of Commerce.
[10]	Department of Defense (DOD) (2021) Zero Trust Reference Architecture, Version 1.0.
[11]	Nan, X.H. (2020) CPK Solution to Cyber Security Theory and Practice, Chapter Three CPK Truth Logic. Publishing House of Electronics Industry.
[12]	Nan, X.H. (2020) GAP One-Step Authentication Protocol, Communication Technologies, Vol. 53.