基于身份一次性公钥的分析与改进  

Analysis and improvementation on identity-based one-off public key

作　　者：李毅[1] 张少武[1] 张远洋[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机工程与设计》2008年第7期1636-1637,1640,共3页Computer Engineering and Design

基　　金：现代通信国家重点实验室基金项目(51436020405JB5205)

摘　　要：为了解决Internet通信的匿名性,张胜等构造了一个基于身份一次性公钥系统。用户只需由可信中心颁发一次私钥,而在每次通信时自己生成不同的公钥,通过与之对应的签名方案,既认证用户身份,又保证用户的匿名性和多次通信之间的不可联系性。分析其安全性,指出了攻击者可以完全攻破该系统的签名过程;针对该漏洞,给出了两种改进,第一种改进仅仅改变一次性公钥但不改变签名过程的基础框架,而第二种改进则改变了签名过程及其对应的签名验证过程。In order to resolve the problem of Intemet communication anonymity, Zhang Sheng et al. constructed one-offpublic key system using identity-based cryptography. In this system, user only needs a trust center issuing the private key one time, and he can generate his different public keys when using it. So it can ensure the user＇s anonymity and the disconnection among the user＇s actions. The system＇s security is analyzed and the result shows that its signature process can be totally broken, Due to this defect, two improvements are proposed. The one-offpublie key but preserves the signature＇s infrastructure, whereas the second changes the signature process and its corresponding verification.

关 键 词：保密通信 匿名性 基于身份 一次性公钥 双线性映射 

分 类 号：TN918[电子电信—通信与信息系统]