一种公平有效的假名管理模型  

Efficient Fair Pseudonym Management Model

作　　者：朱晓玲[1] 陆阳[1,2] 张本宏[1] 侯整风[1] 

机构地区：[1]合肥工业大学计算机与信息学院,合肥230009 [2]安徽省矿山物联网与安全监控技术重点实验室,合肥230088

出　　处：《计算机科学》2013年第11期122-125,共4页Computer Science

基　　金：国家自然科学基金项目(60873195);国家"863"计划项目(2011AA060406);安徽省自然科学基金项目(090412051)资助

摘　　要：匿名是实现隐私保护的有效方法。由于恶意用户的存在,一些应用需要匿名追踪。针对当前可追踪匿名方案存在的两个问题:管理员的权利过大,ID和秘密关联的追踪机制产生的存储和搜索开销随着用户数量的增加而增加,提出了一种公平有效的假名管理模型。模型由假名证书发行、应用和协同追踪组成;采用新的部分盲签名协议确保CA参与假名证书发行,但无权追踪;采用秘密共享机制确保追踪机构必须协同才可揭露假名。由于实现了发行和追踪的分离且追踪机构无需存储、搜索ID与秘密的关联,因此所提模型有效地解决了上述问题。分析表明,模型具有匿名性、可追踪性、不可伪造性、健壮性、公平性,可应用于有匿名追踪需求的Internet安全通信,且能够与传统的PKI应用较好地衔接。Anonymity is an effective approach to achieve privacy protection. Due to the illegal operation of a malicious user, anonymity requires to be disclosed in some applications. However there are two problems in the existing traceable anonymous schemes. The first one is that the rights of the administrator are too large. Secondly the overhead of storage and search for the relation between ID and a secret increases as the number of users increases. The paper proposed an efficient fair pseudonym management model. The model is composed of pseudonym issuance, pseudonymous application and joint tracking. The new partially blind signature protocol was given to ensure that CA takes part in pseudonym is- suance, however, it is unable to track. A secret sharing method was proposed to ensure that tracking authorities iointly disclose a pseudonym. The above two problems are solved effectively by the separation of issuance and tracking without storage and search for the relation between ID and secret. The analysis shows the model has the characteristic of ano- nymity, traceability, unforgeability, robustness and fairness. So it can be applied in anonymous communication with tracking requirements in Internet. Moreover, it can link up with traditional PKI technique well.

关 键 词：匿名 假名管理 部分盲签名 协同追踪 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]