身份可追查的抗合谋攻击广义虚拟企业信任交互方案  

Novel conspiracy attack immune generalized interactive authentication scheme for virtual enterprises with traceability

作　　者：张文芳[1,2] 王小敏[1] 何大可[1,2] 

机构地区：[1]西南交通大学信息科学与技术学院,四川成都610031 [2]西南交通大学信息安全与国家计算网格四川省重点实验室,四川成都610031

出　　处：《计算机集成制造系统》2010年第7期1558-1567,共10页Computer Integrated Manufacturing Systems

基　　金：国家自然科学基金资助项目(60903202);教育部新教师基金资助项目(20090184120024);西南交通大学基础研究基金资助项目(2008B08);中央高校基本科研业务费专项资金资助项目(SWJTU09BR110)~~

摘　　要：现有的虚拟企业信任交互方案,均不能抵抗盟主与盟员及盟员与盟员间的合谋攻击,也不具备盟员间出现信任纠纷时的身份追查功能。为此,提出了一个身份可追查的抗合谋攻击广义虚拟企业信任交互方案。新方案通过在证书签发过程中引入签名成员的固有公私钥信息实现抗合谋攻击,通过构建身份跟踪数据库和y值吊销列表实现责任追查,通过部分签名验证实现错误定位。分析表明,新方案不仅具备已有方案的安全特性,还具备抗合谋攻击和身份可追查功能,且能灵活适应虚拟企业的不同组织模式,为虚拟企业盟员间的信任交互提供了安全可行的解决方案。There were several preliminary interactive authentication schemes for Virtual Enterprise （VE）, but none of them could resist conspiracy attacks or trace the members＇ identities which participated in a Virtual Certificate Authority （VCA） signature＇s generation. To solve these problems, a novel conspiracy attack immune generalized interactive authentication scheme for VE with traceability was proposed. In this new scheme, the conspiracy attack immune property was obtained by introducing signers＇ inherent secret keys＇ and public keys＇ information into VCA signature, and the traceability was realized by constructing identity tracking database and y-value＇s revocation list. Furthermore, the new scheme could locate errors by partial signature＇s verification function. Analysis shows that the new scheme was more secure and was suitable for various VE＇s organization forms. It provided a feasible solution for VE＇s interactive authentication.

关 键 词：虚拟企业 虚拟认证中心 门限签名 合谋攻击 可追查性 广义信任交互 安全性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]