一种基于属性环签名的高效匿名证明协议  

Efficient anonymous attestation from attribute-based ring signature

作　　者：罗东俊[1,2] 张军[1] 

机构地区：[1]广东商学院信息学院,广州510320 [2]华南理工大学计算机科学与工程学院,广州510641

出　　处：《计算机应用研究》2012年第9期3470-3474,共5页Application Research of Computers

基　　金：国家自然科学基金资助项目(60873198);广东省自然科学基金资助项目(10151032001000003);广州市科学技术局资助项目(2009J1-C391)

摘　　要：远程证明是可信计算领域中亟待突破的重要问题。结合二进制证明和基于属性的证明,应用环签名思想提出了一种简单、高效的匿名远程证明协议。该协议不需要属性证书,也不需要AIK证书,它通过借助一个离线可信第三方,应用可信计算绑定和密封机制,采用基于双线性对的属性环签名,同时实现了平台的身份证明和完整性状态证明。分析和实验表明,该协议具有不可伪造性、平台身份匿名性、配置隐私保护性和抗共谋性,并具有很高的运行效率;与现有典型的基于双线性对证明协议相比,签名长度减少了79.73%,所需验证的双线性对减少了50.00%,很好地解决了一直困扰可信计算中的远程证明和效率问题。Remote attestation is an important problem needed to be resolved in trusted computing.This paper proposed an elegant,highly-efficient and anonymous remote attestation protocol.It combined binary attestation with property-based attestation and adopted the thought of ring signature.It needed neither property certificates nor AIK certificates.It concurrently achieved the identity attestation and the integrity attestation for platforms,by resorting to an off-line trusted third party,mechanisms of binding and sealing in trusted computing and attribute-based ring signature from bilinear maps.The analysis and experiment show the protocol satisfies the properties of non-forgeability,anonymity of platform identity,protection of configuration privacy and resistance to collusion,and has fine performance.Compared with the existing typical attestation protocol from bilinear maps,the size of the signature decreases by 79.73%,and the pairing operations also decrease by 50%.The protocol has perfectly resolved the trouble problems of remote attestation and efficiency in trusted computing

关 键 词：远程证明 可信计算 基于属性 环签名 安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]