新颖的基于并发签名的公平交易协议  

Novel fair exchange protocol based on concurrent signature

作　　者：陈广辉[1] 卿斯汉[1,2] 齐志峰[1] 杨义先[1] 

机构地区：[1]北京邮电大学网络与交换技术国家重点实验室信息安全中心 [2]北京大学软件与微电子学院,北京102600

出　　处：《通信学报》2008年第7期39-43,共5页Journal on Communications

基　　金：国家重点基础研究发展计划(“973”计划)基金资助项目(2007CB310704,G1999035802);北京邮电大学博士研究生创新基金(2006)资助项目;北京市自然科学基金资助项目(4052016);国家自然科学基金资助项目(60573042)~~

摘　　要：基于完美的并发签名,提出了一个新颖的公平交易协议,在双方起初交换2个模糊签名及相关交易数据的时候,任何人都无法辨认是谁签了哪一个签名,直到发起方公布一个秘密信息,2个签名才同时绑定到各自的签署方,之后另一方发送解密商品的密钥,从而让双方都能公平的得到对方的物品,而且本协议无需可信第三方(TTP)的参与即可让交易双方公平地交易数据条目,避免了两方勾结的可能性以及可信第三方参与协议的瓶颈。通过分析,协议很好地保证了公平性、不可否认性以及不可滥用性等性质,而且协议只需两方发送4条消息,简洁高效。Based on perfect concurrent signature, a novel fair exchange protocol was presented. In this protocol anyone can＇t identify who has signed which signature when two parties have exchanged their two ambiguous signatures and relative data items. Not until the initial signer publishes a secret information, are the two signatures bound to respective signer concurrently. After that, the other party sends the key of decrypting goods, and thus the two parties can fairly get each other＇s data items without the trusted third party （TTP）, which avoids the possibility of two parties, collusion and the bottleneck of the TTP involvement. Through analysis, this protocol well ensures some significant properties of fair exchange, such as fairness, non-repudiation and abuse-free etc. What＇s more, it only needs four messages between two parties and it is very simple and highly efficient.

关 键 词：安全协议 公平交易 并发签名 不可否认性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]