指定接收者恢复消息的抗抵赖数字签名体制  

Non-repudiation signature with message recovery for specified recipient

作　　者：谢琪[1] 于秀源[2] 

机构地区：[1]杭州师范学院信息工程学院 [2]杭州师范学院

出　　处：《浙江大学学报（理学版）》2005年第4期382-385,共4页Journal of Zhejiang University（Science Edition）

基　　金：国家自然科学基金资助项目(No.10271037).

摘　　要：抗抵赖的签密方案在一些应用中有重要的价值.已有的方案如认证加密方案和签密方案在解决签名者事后抵赖的问题时,必须把恢复的消息提供给第三方,从消息的保密方面看,效果并不理想.基于离散对数问题提出了安全有效的指定接收者恢复消息的抗抵赖数字签名体制,其特点是只有指定接收者才可以恢复消息,任何人可以验证签名的合法性,在解决签名者事后抵赖的问题中克服了已有方案的缺陷,不需要签名者的合作、不需要向第三方提供恢复的消息、不需要与第三方执行交互的零知识证明,在保持恢复消息秘密的同时能揭穿签名者的抵赖行为.同时把该方案扩充到了指定的一群接收者恢复消息的抗抵赖的多重签名的情形.In some applications, it is necessary that the signature only needs to be verified and the message only needs to be recovered by some specified recipients while keeping the message secret from the public, and the signer can not repudiate the signature. Non-repudiation signature scheme with message recovery for specified recipient based on discrete logarithm is proposed. It has many efficiency features, only the recipient can recover the message, and any one can verify the signature. In order to solve the repudiation of the signer, compared with the previous schemes, the proposed scheme does not need to present the recovered message to the third party, to cooperate with the signer, or to perform a zero-knowledge protocol. Moreover, it can extend to non-repudiation multisignature scheme with message recovery for specified group of recipients.

关 键 词：数字签名 多重签名 消息恢复 离散对数 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]