一种新的不安全信道上的匿名认证方案  

A novel anonymous authentication scheme over the insecure channel

作　　者：曹雪菲[1] 曾兴雯[1] 寇卫东[1] 禹勇[1] 

机构地区：[1]西安电子科技大学综合业务网理论及关键技术国家重点实验室,陕西西安710071

出　　处：《西安电子科技大学学报》2007年第6期877-880,910,共5页Journal of Xidian University

基　　金：教育部高校博士点基金资助(2004071001)

摘　　要：基于双线性对构造了一种基于身份的签名算法,利用双线性对的双线性和非退化性,使得算法中签名矢量的验证结果相对于用户身份为一个常量.然后基于该算法提出一种新的匿名认证方案,解决了在不安全信道上进行用户匿名认证的问题.在匿名认证方案中,用户生成临时身份,服务器利用该临时身份计算用户帐户索引,获得用户真实身份并认证用户.新方案实现了用户匿名性及自主口令更新,且服务器无需维护用户通行字或临时身份列表,解决了现有方案无法同时保证不安全信道上的认证安全性和用户匿名性的问题.Firstly, an ID-based signature scheme is proposed based on pairings. The bilinearity and non- degeneration of pairings are explored to make the verification result of the signature vary only with the identity of the signer. Then an anonymous authentication scheme is proposed based on the signature scheme. During the authentication, a user chooses a pseudonym by him/herself; then server computes the user＇s account index from the pseudonym in order to identify and authenticate the user. With our scheme, users are able to travel incognito and to change their passwords at will. Furthermore, there is no need for server to maintain a table of users＇ passwords or pseudonyms. To the best of our knowledge, the proposed scheme realizes for the first time both user anonymity and authentication security requirements over the insecure channel.

关 键 词：基于身份的签名 匿名认证 双线性对 

分 类 号：TN393.08[电子电信—物理电子学]