高效的无证书签名和群签名方案  

Efficient Certificateless Signature and Group Signature Schemes

作　　者：陈虎[1] 朱昌杰[1] 宋如顺[2] 

机构地区：[1]淮北煤炭师范学院计算机科学与技术学院,安徽淮北235000 [2]南京师范大学数学与计算机科学学院,南京210097

出　　处：《计算机研究与发展》2010年第2期231-237,共7页Journal of Computer Research and Development

基　　金：国家"211工程"建设项目(181070H901);国家自然科学基金项目(60673070);江苏省自然科学基金项目(2003101SBRB231)~~

摘　　要：研究新兴无证书密码体制下的群签名问题,提出无证书群签名的安全模型.利用双线性映射提出一个无证书签名方案,并在随机预言模型下给出它正式的安全证明.利用所给的签名方案设计了一个无证书群签名方案.前者在签名和验证阶段只需一个双线性运算,后者只需两个,故它们具有执行性能上的优势.它们的安全性建立在计算Diffie-Hellman问题困难性上.该群签名方案满足群签名的各种安全要求,还允许用户动态的加入与离开且不需更新群公钥和其他群成员的签名私钥.群签名的长度不依赖于群成员的数目.鉴于群签名方案安全、高效和无证书管理的优点,它可广泛应用于电子商务、电子投票等方面.Group signatures are studied in newly proposed certificateless public key setting. The security model for the certificateless group signature scheme is put forward. Using bilinear pairings, a certificateless signature scheme is presented, which is formally proven in the random oracle. At the same time, a group signature scheme, based on the certificateless signature scheme given in this paper, is constructed. The former is computationally efficient in that it just needs one pairing operation in its signing and verification phases, the latter just needs two pairing operations. So they have advantage in performance. The security of these schemes is based on the fact that the computational Diffie-Hellman problem is hard. This group signature scheme not only enjoys all the security requirements of a group signature, but also is a dynamic group signature scheme that allows users to join or leave the group freely without updating the group public key and other group members＇ private signing key. Besides, the length of the signature is independent of the numbers of the group members. Due to its security, high efficiency and freedom from certificate management, the group signature scheme may have practical applications in electronic commerce and electronic voting, etc.

关 键 词：无证书密码体制 群签名 双线性映射 计算Diffie—Hellman问题 随机预言器 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]