基于Rabin签名的一种低带宽域间路径验证方法  

Rabin Signature Based Method for Low Bandwidth Authenticating Inter-domain Paths

作　　者：杨波[1,2] 

机构地区：[1]江西财经大学信息管理学院,南昌330013 [2]江西省电子商务工程技术研制中心,南昌330013

出　　处：《小型微型计算机系统》2013年第10期2373-2376,共4页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(10961013/A010206;61262010)资助;江西省教育厅科技项目(GJJ12735)资助;江西省自然科学基金项目(20132BAB201036)资助

摘　　要：带宽消耗大是域间路径验证机制实际部署实施的主要障碍之一.现有方案基本上都使用基于RSA的聚合签名来降低路径证明的容量,以减少多个签名所造成的带宽消耗.为了保证聚合签名的安全性,相关参数的设置将导致验证过程中计算量大幅度提高.为降低带宽消耗的同时降低验证计算量,本文将Rabin签名引入验证机制的设计,使用Rabin聚合签名创建路径证明并给出了相应的创建和验证算法,同时克服了不同用户使用不同模数值带来的签名唯一性问题.使用本方法,路由通告传播过程中带来带宽增量平均值为通常机制约1/5,路径证明验证式中幂运算仅需进行一次乘法,在降低带宽消耗的同时大幅度降低验证计算量,提高了验证机制的效率.As with deploying mechanisms for authenticating inter-domain paths, one of main obstacles which has to be overcome is that high bandwidth. Aggregate signatures based on RSA are always used in existing mechanisms to reduce the sizes of route attesta- tions, and thus reduce the high bandwidth brought about by several digital signatures. In these existing mechanisms, related parame- ters which are used to ensure security bring about large computing burden of verifying these route attestations. For reducing both band- width and computing burden, Rabin signatures are introduced in the design of authenticating mechanisms. Rabin based aggregate sig- natures are used to create route attestations. Corresponding algorithms for creating and verifying these route attestations, which can al- so overcome the problems brought about by the different moduli among different signers, are given. In the presented method, the av- erage increments of bandwidth are about one fifth of that of common mechanisms. Only one multiplication is needed to compute the exponentiation in verifying formula. It can reduce not only bandwidth but also computing burden, which can improve efficiency of au- thenticatin~ mechanisms.

关 键 词：带宽 RSA 聚合签名 路径证明 Rabin签名 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]