基于RSA签名的优化公平交换协议  

A Fair Exchange Protocol Based on RSA Signature Scheme

作　　者：周永彬[1] 张振峰[1] 卿斯汉[1] 季庆光[1] 

机构地区：[1]中国科学院软件研究所,北京100080

出　　处：《软件学报》2004年第7期1049-1055,共7页Journal of Software

基　　金：国家自然科学基金;国家重点基础研究发展规划(973)~~

摘　　要：公平性是电子商务协议的基本安全要求.RSA是应用最为广泛的公钥密码体制之一.公平交换协议可以使得参与交换的双方以公平的方式交换信息,这样,要么任何一方都可以得到对方的信息,要么双方都得不到对方的信息.分析了现有的公平交换协议构造方法、体系结构及其在实用性和效率方面存在的问题.在此基础上,利用精心构造的扩环中可公开验证的、加密的RSA签名,提出了一种完全基于RSA签名方案的优化公平交换协议,并对其安全性和效率进行了证明和分析.分析表明,提出的方案是简洁、高效、安全的.Fairness is the basic requirement of E-Commerce protocols. RSA is one of the most widely used cryptosystems. A fair-exchange protocol allows two parties to exchange items in a fair way so that either each party gets the other's item, or neither party does. In this paper construction and architecture of the existing fair exchange protocols are analyzed. Both practicality and efficiency problems of these protocols are also presented. Based on this analysis, an optimistic fair exchange protocol totally based on RSA signature scheme is proposed. The novel scheme employs verifiably encrypted RSA signatures in the extended integer ring that is elaborately constructed. The security and efficiency of the newly devised scheme are also proved and examined. It is showed that the proposed scheme is secure and efficient.

关 键 词：公平交换协议 RSA密码体制 可验证的、加密的签名 信息安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]