可转换认证加密的安全邮件协议  

A Sec-Email Protocol Based on the Convertible Authenticated Encryption Scheme

作　　者：崔军[1,2] 刘琦[3] 张振涛[1,2] 李忠献[1,2] 杨义先[1,2] 

机构地区：[1]北京邮电大学网络与交换技术国家重点实验室,北京海淀区100876 [2]北京邮电大学网络与信息攻防技术教育部重点实验室,北京海淀区100876 [3]天津城市建设学院电子与信息工程系,天津西青区300384

出　　处：《电子科技大学学报》2010年第4期598-602,622,共6页Journal of University of Electronic Science and Technology of China

基　　金：国家973计划(2007CB310704);国家863计划(2007AA01Z430);国家自然科学基金(60821001)

摘　　要：通过对电子商务中不可否认公平交换协议的运行流程进行了研究,论证了基于第三方的不可否认公平交换协议至少需要运行4步骤,进而指出现有一个协议实质上是需要运行4步骤的,而不仅仅是运行3步骤。依据安全协议与密码系统分开设计的原则,对比分析已有可转换认证加密方案,提出了一个可转换认证加密方案的系统模型。并基于该系统模型,设计了基于半可信第三方的不可否认的安全邮件协议。通过形式化方法分析表明,该协议具备邮件发送方和接收方均不可否认的特点。On deep research on the workflow of non-repudiation and fair-exchange protocols in electronic commerce, it is proved that these protocols with trusted third party need to run in four steps at least. The analysis of an existing protocol shows that it needs to run in four steps, rather than just run in three steps it claims. On the principle that security protocol and cryptography system should be designed separately, a common model of convertible authenticated encryption schemes is proposed by analyzing some existing convertible authenticated encryption schemes. By using this model, a secure email protocol with semi-trusted third party is designed. Result shows that this protocol has non-repudiation features of both sender and receiver by formal analysis.

关 键 词：可转换的认证加密 电子商务 公平交换 形式化方法 不可否认 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]