一种用于流交换的代理重签名方案  

Proxy Re-Signature Scheme for Stream Exchange

作　　者：孙奕[1,2,3] 陈性元[2] 杜学绘[2,3] 陈亮[2] 徐建[2] 

机构地区：[1]北京交通大学计算机与信息技术学院,北京100044 [2]解放军信息工程大学,河南郑州450000 [3]数学工程与先进计算国家重点实验室,河南郑州450000

出　　处：《软件学报》2015年第1期129-144,共16页Journal of Software

基　　金：国家高技术研究发展计划(863)(2012AA012704);河南省科技创新人才计划(114200510001)

摘　　要：为了解决大规模复杂网络环境下流交换的安全问题,首次将代理重签名技术应用到安全流交换中,提出一种用于流交换的基于陷门Hash函数的代理重签名方案.首先,针对陷门Hash函数在流交换应用中存在的密钥泄露问题,提出一种新的基于椭圆曲线的无密钥泄露的陷门Hash函数(EDL-MTH),并对其安全性加以证明;然后,基于EDL-MTH构造了一个在随机预言模型下可证明适应性选择消息攻击安全的代理重签名方案;最后,通过一个示例分析了该方案在安全流交换中的应用和性能.To tackle the problems of security stream exchange in the large-scale complicated network, this paper applies proxy re-signature technology for the first time to solve the flow exchange security issues, and proposes a proxy re-signature scheme based on trapdoor Hash function for stream exchange. Firstly, aiming at the key exposure problem of trapdoor Hash function for stream exchange, a new trapdoor Hash functions without key exposure （EDL-MTH） is put forward and its security is analyzed. Then, a new proxy re-signature scheme based on EDL-MTH is constructed and is proved against the chosen-message attack in the random oracle model. Furthermore, the performance of the scheme is analyzed contrast to the existing proven security proxy signature scheme, and the result shows the efficiency becomes more prominent while the scale of stream exchange is increased. Finally, a case study is provided to demonstrate its availability and performance in security stream exchange.

关 键 词：流交换 陷门Hash函数 代理重签名 适应性选择消息攻击 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]