基于签密的公平交易协议的安全性分析与改进  

Security Analysis on the Improvement of a Signcryption-Based Fair Exchange Protocol

作　　者：孙艳宾[1,2] 孙燕[3] 赵辰[1,2] 卿斯汉[4] 杨义先[1,2] 

机构地区：[1]北京邮电大学网络与交换技术国家重点实验室,北京100876 [2]北京邮电大学网络与信息攻防技术教育部重点实验室,北京100876 [3]石家庄陆军指挥学院,石家庄050084 [4]北京大学软件与微电子学院,北京102600

出　　处：《北京邮电大学学报》2011年第6期38-41,共4页Journal of Beijing University of Posts and Telecommunications

基　　金：国家自然科学基金项目(60970135;90718001);国家重点基础研究发展计划项目(2007CB310704)

摘　　要：分析指出基于签密的并发签名方案是不抗接收者伪造的,即在没有签名者的关键数与密钥的情况下,接收者利用签名者的有效模糊签名便可恢复出签密消息,且可以以签名者身份伪造任意消息的模糊签名.因此,基于该签密并发签名方案的公平交易协议也是不安全的,进而提出了一个改进的基于签密的并发方案,弥补了原并发签名方案的安全缺陷,从而保证了公平交易协议的安全性.Recently, a fair exchange protocol based on the signcrytion-based concurrent siganture is proposed, and the authors claimed that their schemes are secure. Through security analysis, we find the signcryption-based concurrent signature seems insecure. If the receiver has a valid ambiguous signature of the signer, without the signer＇ s keystone and secret key, he could obtain the signer＇ s message and forge an ambiguous signature on arbitrary message in the name of the signer. So, the fair exchange protocol is unreliable, then an improved signerytion-base concurrent signature is presented here, it can overcome the flaw of the previous scheme and ensure the security of the fair exchange protocol.

关 键 词：签密 并发签名 公平交易协议 安全性 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]