一种门限代理签名方案的分析与改进  

Cryptanalysis and Improvement of a Threshold Proxy Signature Scheme from Bilinear Pairings

作　　者：鲁荣波[1] 何大可[2] 王常吉[3] 

机构地区：[1]吉首大学数学与计算机科学学院,湖南吉首416000 [2]西南交通大学信息安全与国家计算网格实验室,四川成都610031 [3]中山大学计算机科学系,广东广州510275

出　　处：《电子学报》2007年第1期145-149,共5页Acta Electronica Sinica

基　　金：国家自然科学基金(No.60503005)

摘　　要：通过对Qian-cao-xue的基于双线性映射的的门限代理签名方案分析,发现该方案并不满足强不可伪造性,任何人包括原始签名人可以伪造一个有效的代理签名,同时该方案也不能抵抗原始签名人改变攻击.在此基础上提出了改进的门限代理签名方案(方案1),改进的方案克服了原方案的安全缺陷.并把矢量空间秘密共享和多重代理签名结合起来,构建了一种更为广泛的基于访问结构的多重代理签名(方案2).门限代理签名方案(方案1)成为方案2的特殊情形.方案2中任何参与者的授权子集能产生多重代理签名,而非参与者不可能产生有效的多重代理签名,接收者可以通过验证方法验证个体代理签名和多重代理签名的合法性,而且能保证任何参与者都能检测出错误的子秘密.能抵御各种可能的攻击.Present a security analysis of the Qian-cao-xue＇s new threshold proxy signature scheme from bilinear pairings, which does not posses the strong unforgeability property, anyone including original signer can forge a valid threshold proxy signature for any message, at the same time, this scheme can＇ t resist original signer changing attack. An improved threshold proxy signature scheme （ denoted as scheme one） is proposed,which can resolve the security problem existing in the Qian-cao-xue＇s new thin, old proxy signature scheme.Based on scheine one,by combining vector space secret sharing with multi-proxy signature,a new and wider multi-proxy signature （ denoted as scheme two） is constructed. Then scheme one becomes the typical representative of scheme two. In scheme two, the multi-proxy signature can be easily produced if an authorized subset of participants pool their secret shares, and it is impossible for them to generate a multi-proxy signature if an unauthorized subset of participants pool their secret shares. The validity of the partial signature and the multi-proxy signature can be verified by ireans of verification equations. Moreover the suspected forgery can be traced and the malicious participants can be caught. None of the possible attacks can successfully break this scheme.

关 键 词：门限代理签名 双线性映射 强不可伪造性 原始签名人改变攻击 矢量空间秘密共享 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]