一个具有前向安全特性的代理签名算法  

A PROXY SIGNATURE SCHEME WITH FORWARD-SECURE PROPERTY

作　　者：朱黎宏[1] 

机构地区：[1]华东师范大学计算机系,上海200241

出　　处：《计算机应用与软件》2010年第8期1-3,65,共4页Computer Applications and Software

基　　金：国家自然科学基金项目(607023004;60873217;60703031);教育部博士点基金项目(20070269005)

摘　　要：改进一般的代理签名方案,提出了前向安全代理,并给出了前向安全的代理签名方案。方案具有两大优点:保护了被撤销的代理签名人,使被撤销前的代理签名仍具有可验证性;方案具有较高的效率。方案根据前向安全的特性把原始签名人的密钥分成若干个时段,每个时段结束时都要及时更新代理并通过安全信道发给相应的代理人。攻击者截获当前时段的密钥无法伪造之前时段的代理,这样保证了之前时段的代理签名具合法性,即前向安全性。该方案的安全性基于强RSA假设。In this paper we improved general proxy signature schemes, proposed the forward-secure delegation and gave a proxy signature scheme which is of forward-secure. This scheme has two advantages ： it protects the revoked proxy singer by making the proxy signatures prior to the revocation still being verifiable, and has acceptable high efficiency as well. This scheme divides key pair of the original signer into time periods according to forward-secure property, updates the proxies at the end of each time period timely and delivers to the corresponding dele- gations via secure channel. The attacker is not able to forge proxies of the past periods albeit intercepts the key of current period. Therefore the validities of the proxy signatures of the past time periods are protected, that is the forward-security. The security of the proposed scheme relies on the Strong-RSA assumption.

关 键 词：前向安全 代理 代理签名 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]