摘要：【中文】本申请涉及一种基于SM9算法的身份认证方法、装置、计算机设备和存储介质。包括：当触发身份认证请求时，生成随机数和时变参数；基于密码函数，根据声称方标识，得到声称方标识的元；根据随机数和声称方标识的元，确定第一变量元；根据随机数、时变参数、声称方标识的元、声称方的令牌以及口令，确定第二变量元；将声称方标识、时变参数、第一变量元以及第二变量元发送至验证方；由验证方验证时变参数的有效性，当有效时，基于双线性配对运算，根据验证方的令牌、时变参数、第一变量元以及第二变量元，得到双线性配对运算结果，根据运算结果，判断是否满足预设条件，满足预设条件时，返回认证通过消息至声称方。本方法能够提高身份认证的安全性。 【EN】The application relates to an identity authentication method and device based on SM9 algorithm, computer equipment and storage medium. The method comprises the following steps: when an identity authentication request is triggered, generating a random number and a time-varying parameter; based on the password function, obtaining an element of the identification of the claiming party according to the identification of the claiming party; determining a first variable element according to the random number and the element of the identification of the claimant; determining a second variable element according to the random number, the time-varying parameter, the element of the identifier of the claimant, the token of the claimant and the password; sending the identification of the claimant, the time-varying parameter, the first variable element and the second variable element to the verifier; and verifying the validity of the time-varying parameter by the verifier, obtaining a bilinear pairing operation result according to the token, the time-varying parameter, the first variable element and the second variable element of the verifier based on bilinear pairing operation when the validity is valid, judging whether a preset condition is met according to the operation result, and returning an authentication passing message to the claiming party when the preset condition is met. The method can improve the safety of identity authentication.

摘要：【中文】本申请涉及一种SM9数字签名生成方法、装置、计算机设备和存储介质。该方法包括：当触发数字签名获取时，向密钥生成中心发送用户标识和签名口令以申请签名身份凭据；密钥生成中心根据用户标识和签名口令计算签名身份凭据；接收密钥生成中心返回的签名身份凭据；获取乘法循环群的第一元素；确定数字签名的第一部分；根据签名身份凭据和签名口令得到数字签名的第二部分；根据数字签名的第一部分和数字签名的第二部分，输出数字签名。本申请的方案可以提高数字签名的安全性。 【EN】The application relates to an SM9 digital signature generation method, an SM9 digital signature generation device, a computer device and a storage medium. The method comprises the following steps: when digital signature acquisition is triggered, sending a user identifier and a signature password to a key generation center to apply for a signature identity document; the key generation center calculates a signature identity credential according to the user identification and the signature password; receiving a signature identity credential returned by the key generation center; obtaining a first element of a multiplication cycle group; determining a first portion of a digital signature; obtaining a second part of the digital signature according to the signature identity credential and the signature password; a digital signature is output based on the first portion of the digital signature and the second portion of the digital signature. The scheme of the application can improve the safety of the digital signature.