Blockchain-based Distributed Identity Cryptography Key Management

The identity-based cryptography algorithm SM9 requires a trusted third-party key generation center KGC to generate the user's private key. This will bring the risks and problems of key escrow and single point failure. This paper proposes a distributed identity-based cryptography key management scheme. Participants generate partial identity private key and send to the user. The user locally generates its own identity private key. Meanwhile, the identity status data can be uploaded to the blockchain. This avoids the key escrowing problem, solves the single point failure and trust problem, and improves the system's availability and security. The proposed scheme has obvious advantages in terms of efficiency and bandwidth requirements.