前向安全的指定验证者(t,n)门限代理签名方案  

Forward Secure( t,n) Threshold Proxy Signature Scheme with Designated Verifier

作　　者：崔涛[1] 刘培玉[1,2] 王珍[1] 

机构地区：[1]山东师范大学信息科学与工程学院,济南250014 [2]山东省分布式计算机软件新技术重点实验室,济南250014

出　　处：《小型微型计算机系统》2014年第5期1061-1064,共4页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(60873247)资助;山东省自然科学基金项目(ZR2012FM038)资助

摘　　要：签名算法的安全性依赖于签名密钥的安全性.密钥一旦泄漏,攻击者便可以成功伪造此前的所有签名,这会对整个签名系统造成无法弥补的损失.针对门限代理签名中的密钥泄漏问题,将前向安全引入其中,提出一种具有前向安全特性的指定验证者(t,n)门限代理签名方案.安全性分析表明,新方案真正实现了前向安全.即使当前时段所有成员的密钥被泄漏,也不会影响之前生成的签名的有效性.新方案具有指定验证者的特性,能够确保签名只被预先指定的验证人验证,可以很好地保护原始签名者的隐私.签名具有消息恢复的特性,在传输签名时不用传输明文消息本身,能够减小传输签名时的通信代价.The signature scheme＇s security depends on the security of the secret key. Once the secret key is revealed, the adversary can forge all the previous generated signatures. And it is a great loss to the whole signature system. According to the threshold proxy signature＇s key exposure problem, the forward security is integrated into it to propose a forward secure （t, n） threshold proxy signa- ture scheme with designated verifier. Security analysis shows that the new scheme achieves a truly forward security. Even if all the signers＇ current secret keys are revealed also won＇t affect the previous generated signatures＇ validity. The new scheme has a designated verifier, so the signature can only be verified by him, which can protect the original signer＇s privacy well. And the signature has the properties of message recovery, so it can be transmitted without the plain message which reduces the communication costs of the sig- nature transmission.

关 键 词：门限签名 前向安全 指定验证者 离散对数 强RSA假定 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]