基于属性披露的移动信任协商方案  

Scheme of Attribute-Based Disclosure Mobile Trust Negotiation

作　　者：汪秋云[1] 蒋文保[1] 王鸿[1] 

机构地区：[1]北京信息科技大学信息管理学院,北京100192

出　　处：《电信科学》2013年第10期103-107,共5页Telecommunications Science

基　　金：国家自然科学基金资助项目(No.60873202);北京市自然科学基金资助项目(No.4132011)

摘　　要：针对移动环境下使用传统信任协商方案存在的通信开销、存储开销及计算开销大的问题,提出一种基于属性披露的移动信任协商方案,协商时双方首先交换包含加密属性的信任证,并根据对对方的信任度评估,预先选择性地显露证书中的某些敏感属性,之后再根据协商策略多次交换属性加密密钥,逐步向对方显示自己的属性,从而完成协商过程。通过具体的应用实例说明方案的实现过程,方案性能分析表明该方案高效可行。For it is difficult to use traditional trust negotiation on the mobile environment,which has large communication overhead,storage overhead and computational overhead,an attribute-based disclosure mobile trust negotiation scheme was proposed.In the negotiation process,two sides in trust negotiation exchange certificate which contains encrypted credential attributes firstly,then,one side in trust negotiation can selectively dispose the sensitive attributes to the other side in trust negotiation procedure based on the trust evaluation result of the other,next,two sides in trust negotiation exchange attribute encryption key based on personal security policy until the trust negotiation was completed.The implementation procedure was given in concrete application instances and the scheme was analyzed.

关 键 词：属性证书 移动 信任评估 信任协商 

分 类 号：TN929.5[电子电信—通信与信息系统]