Symbols and abbreviations.

With the rise of the Internet of things, the limitations of traditional PKI certificate authentication technology have progressively emerged. Hence, identity-based public key algorithms have been proposed. In this paper, we propose a new approach to generate an identity key, named identity public key (IPK). IPK identity key generation protocol is based on SM2 elliptic curve cryptography and random matrix theory. It builds upon the concept of combined public key (CPK) and resolves the linear collusion issue of CPK as well as the authenticity verification problem of the declared public key of the simplified TF-CPK by enhancing the identity mapping approach. Another main aim of this paper is to prove the security of the IPK identity key generation protocol. Roughly speaking, we verify the security of each part of the private key and the security of the composite private key. We also increase the function and performance comparison with other schemes, such as IBC(SM9) and TF-CPK. Our scheme has the lowest computation cost, which demonstrates its rationality.随着物联网（Internet of Things，IoT）的崛起，传统公钥基础设施（Public Key Infrastructure，PKI）证书认证技术的局限性日益凸显。为此，基于身份的公钥算法应运而生。本文提出一种全新的身份密钥生成方案，命名为身份公钥（Identity Public Key，IPK）。IPK身份密钥生成协议以SM2椭圆曲线密码体制与随机矩阵理论为基础，其设计依托组合公钥（Combined Public Key，CPK）的理念，并通过优化身份映射机制，解决了CPK存在的线性共谋问题，以及简化型TF-CPK所声明公钥的真实性验证难题。本文另一核心研究目标为验证IPK身份密钥生成协议的安全性：简言之，我们分别验证了单份私钥与复合私钥的安全性。此外，我们还将本方案与基于身份的密码体制（Identity-Based Cryptography，IBC）(SM9)、TF-CPK等同类方案开展了功能与性能对比分析。结果显示，本方案具备最低的计算开销，证实了其设计的合理性。