一种基于群签名的安全电子拍卖方案  

Secure electronic auction scheme based on the group signature

作　　者：张跃宇[1] 李晖[1] 王育民[1] 

机构地区：[1]西安电子科技大学计算机网络与信息安全教育部重点实验室,陕西西安710071

出　　处：《西安电子科技大学学报》2008年第4期614-619,共6页Journal of Xidian University

基　　金：国家自然科学基金资助(60473027;60772736);国家"863"高技术研究发展计划项目基金资助(2007AA01Z435)

摘　　要：基于线性Cramer-Shoup加密方案提出了一种新的短群签名方案,该方案的完全匿名性抗适应性选择密文攻击,允许攻击者在攻击匿名性时打开签名.以该群签名为构造模块设计了一种安全的电子拍卖方案,在相同的安全性要求下,签名长度、群公钥长度、签名密钥长度、注册密钥长度和追踪密钥长度指标与基于RSA问题的同类拍卖方案相比,分别约是它的1/14,1/7,1/17,1/40和1/4.与投标者是抗选择明文攻击完全匿名的基于双线性对的拍卖方案相比,新方案投标者具有抗选择密文攻击完全匿名,而通信量和计算量与前者相当.Based on Linear Cramer-Shoup encryption, a new short group signature is proposed. The anonymity property of this scheme is secure against adaptive chosen-ciphertext attacks （CCA2）, which allows the adversary to open the signature when trying to break the anonymity notion. Using this group signature as a building block, a＇secure electronic auction scheme is designed. Under the same security conditions, the scheme has sizes of signature, group public key, signing key, register key and tracing key 1/14, 1/7, 1/17, 1/40 and 1/4 those of the scheme based on the RSA problem. Compared with the pairing-based scheme in which the bidder＇s anonymity is CPA secure, the complexities of communication and computation in this paper are approximate to those in the former, but the CCA2-full-anonymity of bidders is achieved in this new scheme.

关 键 词：电子拍卖 群签名 线性Cramer-Shoup加密 完全匿名性 

分 类 号：TN918.1[电子电信—通信与信息系统]