Universally composable one-time signature and broadcast authentication  

作　　者：ZHANG JunWei MA JianFeng MOON SangJae 

机构地区：[1]Key Laboratory of Computer Networks and Information Security (Ministry of Education) Xidian University, Xi'an 710071, China [2]Mobile Network Security Technology Research Center, Kyungpook National University, Daegu 702-701, Korea

出　　处：《Science China(Information Sciences)》2010年第3期567-580,共14页中国科学（信息科学）（英文版）

基　　金：supported by the National High-Tech Research & Development Program of China (Grant Nos.2007AA01Z429, 2007AA01Z405);the Major Program of the National Natural Science Foundation of China (GrantNo. 60633020);the National Natural Science Foundation of China (Grant Nos. 60573036, 60702059, 60503012,60872041);the Korea Research Foundation Grant funded by the Korean Government (Grant No. KRF-2008-521-D00449)

摘　　要：Broadcast authentication is a vital security primitive for the management of a copious number of parties. In the universally composable framework, this paper investigates broadcast authentication using one-time signature based on the fact that one-time signature has efficient signature generation and verification suitable for low-power devices, and gives immediate authentication, which is a favorable property for time-critical messages. This paper first formulates a broadcast authentication model with the ideal functionalities such as one-time signature and broadcast authentication, and proposes a broadcast authentication scheme in the hybrid model. This paper then improves HORS, which is secure based on a strong assumption （i.e., a subset-resilient hash function） and presents the improved version as HORS＋, which diffiers from HORS such that it is a secure one-time signature based on weaker assumptions, i.e. one-way functions, one-way hash functions and collisionresistant hash functions. At the same time, a protocol OWC using one-way chains is proposed to provide more registered keys for multi-message broadcast authentication. Our broadcast authentication scheme constructed by the combined use of HORS＋ and OWC is universally composable secure and suitable for low-power devices.Broadcast authentication is a vital security primitive for the management of a copious number of parties. In the universally composable framework, this paper investigates broadcast authentication using one-time signature based on the fact that one-time signature has efficient signature generation and verification suitable for low-power devices, and gives immediate authentication, which is a favorable property for time-critical messages. This paper first formulates a broadcast authentication model with the ideal functionalities such as one-time signature and broadcast authentication, and proposes a broadcast authentication scheme in the hybrid model. This paper then improves HORS, which is secure based on a strong assumption （i.e., a subset-resilient hash function） and presents the improved version as HORS＋, which diffiers from HORS such that it is a secure one-time signature based on weaker assumptions, i.e. one-way functions, one-way hash functions and collisionresistant hash functions. At the same time, a protocol OWC using one-way chains is proposed to provide more registered keys for multi-message broadcast authentication. Our broadcast authentication scheme constructed by the combined use of HORS＋ and OWC is universally composable secure and suitable for low-power devices.

关 键 词：network security universally composable security broadcast authentication one-time signature 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术] TN915.08[自动化与计算机技术—计算机科学与技术]