改进的基于DAA的隐私保护云资源消费系统  

Improved Privacy Preserving Cloud Resource-payment System with Direct Anonymous Attestation

作　　者：柳欣[1,2] 

机构地区：[1]山东青年政治学院信息工程学院,济南250014 [2]山东省高校信息安全与智能控制重点实验室,山东青年政治学院,济南250103

出　　处：《小型微型计算机系统》2015年第12期2707-2713,共7页Journal of Chinese Computer Systems

基　　金：山东省自然科学基金项目(ZR2015FL023)资助;山东省高等学校科技计划项目(J14LN61)资助;山东青年政治学院科研项目(2013QN13)资助;山东青年政治学院博士科研启动经费资助项目(14A007)资助;山东青年政治学院教学改革研究项目(201404)资助

摘　　要：当前,用户在享受低成本且便捷的云服务的同时,不得不面对个人隐私遭受损害的风险.为此,Pirker等人提出一个允许用户利用资源受限设备匿名消费云资源的系统.该系统的主要缺点是要求用户和云服务供应商执行大量的在线对运算,且并未提供完整的协议实现细节及形式化证明.对Brickell等人的DAA(直接匿名证明)方案进行扩展,并且结合Yang等人的改进的BBS+签名证明协议和Peng等人的小区间证明技术提出一个更为高效的改进系统.改进系统在新定义的安全模型下满足可证安全,且具有如下的显著特点,即无需用户执行在线对运算,利用硬件机制防止恶意用户共享匿名令牌,且适合于在智能手机平台上进行部署.At present, while users enjoy the low cost and convenient cloud services, they have to face the risk of personal privacy may suffer damage. To propose a solution to this dilemma, Pirker et al. proposed an anonymous cloud resource payment system for users ＇ constrained devices. Unfortunately, the main disadvantage of their system is that users and cloud service providers have to perform a number of expensive online pairing operations. In addition , they did not provide complete descriptive details and formal security proof. This paper proposed a more efficient revised system, which was constructed by extending the DAA （ direct anonymous attestation ） scheme by Brickell et al. and incorporating the improved protocol for proving knowledge of a BBS ＋ signature by Yang etc. as well as the range proof with practical small ranges by Peng etc. The improved system is provable secure in a new defined security model, and it has several notable characteristics as follows,i, e. ,it does not require users＇ online pairing operations,it can prevent malicious users sharing their anonymous tokens, and it can be easily deployed on popular intelligent mobile phone platforms.

关 键 词：云服务 云资源 隐私保护的 直接匿名证明 区间证明 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]