通用可组合安全的门限签名协议  

Universal composable threshold signature

作　　者：洪璇[1] 陈克非[2,3] 李强[2] 

机构地区：[1]上海师范大学计算机科学与技术系,上海200234 [2]上海交通大学密码与信息安全实验室,上海200240 [3]现代通信国家重点实验室,四川成都610041

出　　处：《通信学报》2009年第6期1-6,共6页Journal on Communications

基　　金：国家自然科学基金资助项目(90704004);国家重点基础研究发展计划("973"计划)基金资助项目(2007CB311201);现代通信国家重点实验室基金资助项目(9140C1103020803)~~

摘　　要：门限签名协议使得签名团体中任何t个参与者合作可以生成某个消息的有效签名;而少于t个参与者就无法得到该消息的合法签名。目前关于门限签名协议的安全性研究只是专注于单一协议执行时的安全性,针对这点,引入通用可组合框架。利用该框架的通用可组合性可以模块化地设计与分析门限签名协议。首先定义了门限签名协议在通用可组合框架下的安全模型,并证明其等价于门限签名协议标准概念下的安全模型,然后以前摄门限签名协议为例描述如何应用这个安全模型。提出的门限签名协议和前摄性门限签名协议不仅满足可证明安全性,还具有通用可组合安全性。Threshold signature allowed any subset of t parties generating a signature, but that disallowed the creation of a valid signature if fewer than t parties participate in the protocol. Since the security of threshold signature was only considered in a single instance before, the universal composability framework was introduced. The framework with its security preserving composition property allowed for modular design and analysis of the threshold signature. The defined ideal functionality of threshold signature is proved equals to the standard security notion of threshold signature. Furthermore, how to applying the ideal functionality is described. The proposed threshold signature protocol and proactive threshold signature protocol are not only provably secure, but also universally composable.

关 键 词：门限签名协议 UC框架 UC安全 前摄门限签名协议 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]