基于ElGamal签名的隐私保护网上交易方案  

Privacy-preserving online transaction scheme based on El Gamal signature

作　　者：杨波[1,2] 李顺东[2] 周素芳[2] 

机构地区：[1]兰州文理学院电子信息工程学院,兰州730010 [2]陕西师范大学计算机科学学院,西安710062

出　　处：《计算机应用研究》2014年第12期3707-3710,共4页Application Research of Computers

基　　金：国家自然科学基金资助项目(61272435)

摘　　要：针对网上交易时的用户个人隐私安全问题,依据不经意传输理论,基于El Gamal签名的不经意签名电子信封(OSBE)模型,提出了一个可保护用户隐私的网上交易数字商品方案。首先用户匿名付费给银行,然后银行将用户订购商品的数字签名发送给用户,接着用户使用数字签名与商家进行不经意信息交互,最后用户得到且只能得到自己订购的数字商品,商家并不知道用户订购何种数字商品。正确性证明和安全性分析结果表明,可以有效地保护用户在网上交易过程中的个人隐私,同时防止商家恶意欺诈行为。该方案签名相对较短,计算量较小,密钥动态变化,安全性更强。The users’ privacy should be protected in online transactions. In view of this,according to the oblivious transfer,this paper proposed an online trading scheme of digital goods to protect the users’ privacy using oblivious signature-based envelope（ OSBE） based on El Gamal signature. First,a user paid the bank anonymously and correctly; the bank sent a digital signature of the digital goods to the user; and then the user interacted with the merchant obliviously through the digital signature he has paid; finally,the user could and only could get the digital goods he paid,and the merchant couldn’t distinguish the digital goods ordered. Correctness proof and security analysis shows that the scheme can effectively protect the users’ privacy in online transactions and prevent the merchant’s malicious fraud. The signature scheme is relatively short,less amount of calculation and the key dynamic change,security is stronger.

关 键 词：隐私保护 不经意传输 签名 不经意签名电子信封 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]