抗代间污染攻击的网络编码签名方案  

Signature scheme for network coding against inter-generation pollution attacks

作　　者：彭天丽 尚涛[1] 刘建伟[1] 

机构地区：[1]北京航空航天大学电子信息工程学院,北京100191

出　　处：《北京航空航天大学学报》2015年第4期721-726,共6页Journal of Beijing University of Aeronautics and Astronautics

基　　金：国家973计划资助项目(2012CB315905);国家自然科学基金资助项目(61272501);Research Promotion Grant-in-Aid for KUT Graduates of Special Scholarship Program;中央高校基本科研业务费资助项目(YWF14DZXY012)

摘　　要：为适应实时应用的需求,网络编码中引入了代的概念.针对网络编码易受代间污染攻击导致消息发生串扰的问题,提出了基于代标识符的网络编码签名方案.首先,方案中设置了依据代标识符生成的两级私钥,包括代私钥以及在此基础扩展成的消息私钥,以便节点判断消息的代属性来决定是否对它继续进行编码;其次,利用双线性对构造了具有同态性质的签名算法,通过分离两级私钥进行批验证,节点可同时验证同一代的所有消息.最后,通过随机预言模型分析,证明了该方案在适应性选择消息攻击下是安全的.通过开销分析表明方案能有效减少验证开销,提高系统性能.The concept of generation is introduced into network coding so as to adapt to the needs of realtime application. Considering that network coding is vulnerable to inter-generation pollution attacks and causes message crosstalk, a generation-identifier based signature scheme for network coding was proposed. Firstly, the two-level private keys, including the generation private key and the message private key, both derived by the generation identifier were set. This procedure enabled nodes to judge the generation attribute of messages and decided whether to continue coding. Secondly, a signature algorithm was constructed with homomorphic property by using the bilinear pairing. Meanwhile the two-level private keys were separated to verify signatures by batch, which made nodes verify all the massages of the same generation simultaneously. Finally, through the analysis of random oracle model, the scheme was proved secure against adaptively chosen message attack. The result indicates that the scheme can reduce computation cost and improve performance of the system.

关 键 词：网络编码 代间污染攻击 同态签名 批验证 双线性对 

分 类 号：TN918.1[电子电信—通信与信息系统]