DAA协议的安全性分析及改进  

Security analysis and improvement of DAA protocol

作　　者：宋扬[1] 李立新[1] 周雁舟[1] 沈平[2] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004 [2]大连理工大学,辽宁大连116500

出　　处：《计算机工程与设计》2010年第1期26-29,共4页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2008AA01Z404)

摘　　要：为更好发挥DAA协议在隐私保护方面的作用,提高协议自身的安全性,对现有DAA协议的性能及安全进行了分析,列举了协议在提高性能方面所采取的优化策略及其满足的安全属性。重点分析了协议可能存在的安全问题,如RSA安全问题、恶意Issuer问题、Rudolph攻击、跨域认证问题等,特别指出现有协议存在的共性安全问题:只满足RO模型下可证明安全性。提出解决上述问题的具体方法及所需技术,为构建新的DAA方案、实现新方案在标准模型下的安全性证明奠定理论基础。In order to better play at the role of privacy protection of DAA protocol and improve the safety of the protocol-self, Firstly, the performance and the security of DAA in existence are analyzed, the optimization strategies to meet the safety and property of DAA are listed. Secondly, some potential security problems are analyzed, such RSA security problem, malicious issuer problem, rudolph attack, cross-domain authentication problem and so on, especially some mutual problem is pointed out-Just proved in random oracle mode. Finally, some specific methods and skills required to solve the above problems are pointed out which are used to build new DAA program and implement the security proof of new program in the standard model.

关 键 词：可信平台模块 直接匿名证明 短群签名 标准模型 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]