无证书的环签名方案  

Certificateless Ring Signature Scheme

作　　者：徐倩[1] 张福泰[1] 刘志高[1] 黄欣沂[1] 

机构地区：[1]南京师范大学数学与计算机科学院,南京210097

出　　处：《计算机工程与应用》2006年第2期116-120,共5页Computer Engineering and Applications

基　　金：国家"十五"计划"211"工程重点学科项目(编号:181070H901);江苏省高校自然科学研究计划重点项目(编号:03KJA520066)

摘　　要：在传统数字签名机制中,用户的公钥需要由经过可信第三方(TTP)签名的证书来保证其可靠性,而Shamir的基于身份的签名机制尽管不再需要证书,但用户的私钥将无法避免地被TTP所托管。在2003年Asiacrypt上无证书签名的概念被提出,采用这种签名机制不仅无需证书,而且也解决了密钥托管的问题。文章在此基础上,首次提出了无证书环签名的概念,并且给出了一种构造无证书环签名方案的一般性方法.安全性分析表明用该方法构造的方案是安全的.作为例子,文章中还给出了一个具体的无证书环签名方案的实例。In traditional digital signature schemes,certificates signed by a trusted party（TIP） are required to ensure the authenticity of the public keys of users.While Shamir＇s identity-based public key crytosystem does not need the certificates,the key escrow of users＇ private keys is inherent in such scheme.In Asiacrypt 2003,the concept of certificateless signature scheme was introduced.In this new paradigm,the necessity of certificates has been successfully removed and the key escrow problem does not exist. Based on the ideas of certificateless signatures,the concept of Certificateless Ring signature is proposed in this paper.A generic method to construct Certificateless Ring signature scheme is presented with its security analyzed.As an example,a concrete scheme is given.

关 键 词：Difile-Hellman问题 双线性映射 无证书签名 环签名 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]