可选子密钥的门限追踪匿名认证方案  

Self-Selecting Share Threshold Traceable Anonymous Authentication Scheme

作　　者：殷凤梅[1] 侯整风[2] 濮光宁[3] 

机构地区：[1]合肥师范学院公共计算机教学部,安徽合肥230601 [2]合肥工业大学计算机与信息学院,安徽合肥230009 [3]安徽财贸职业学院雪岩贸易学院,安徽合肥230601

出　　处：《武汉大学学报（理学版）》2015年第6期549-553,共5页Journal of Wuhan University:Natural Science Edition

基　　金：安徽省高等学校省级优秀青年人才基金重点项目(2013SQRL063ZD);安徽省高等学校省级质量工程教学研究项目(2013jy xm1740)

摘　　要：在现有的一些匿名认证方案中,成员不能自主选择子密钥,示证者不能自由选择匿名集,导致方案的计算代价较大,匿名认证过程较复杂.为了解决这两个问题,本文提出了一种新的门限追踪匿名认证方案.该方案允许成员自主选择子密钥,计算屏蔽子密钥作为签名私钥以保护成员的子密钥;示证者使用自由选择的匿名集和自己的签名私钥,借助1/n签名实现匿名认证;基于Lagrange插值,t个成员合作实现门限追踪,并验证追踪到的示证者身份的真实性.与现有方案相比,该方案计算代价较小,成员自主性更大,匿名认证更简单,匿名追踪更安全.在离散对数假设和DDH(Decisional Diffie-Hellinm)假设的前提下,该方案满足匿名性、门限可追踪性,可抵抗外部伪装攻击和一致性攻击.Among the present anonymous authentication schemes,the member cannot choose a secret share independently,and the prover can not choose the anonymity set freely,which leads to higher computational cost of the schemes and more complex anonymous authentication process.Therefore,a new threshold traceable anonymous authentication scheme is presented to solve these two problems.In the scheme,the member selected a secret share autonomously,which was protected by calculating shielding share as the private key.Based on the idea of 1/n signatures,the prover used the freely-choosing anonymity set and his（or her）own private key to achieve the anonymous authentication.With the help of Lagrange interpolation,t members＇ cooperation could achieve threshold tracking,and the authenticity of the prover＇s identity could be verified.Compared with the existing schemes,this scheme has lower computation cost,greater members autonomy,simpler anonymity authentication,and more secure anonymous tracking.On the premise of the discrete logarithm assumption and Decisional Diffie-Hellman assumption,the scheme is proved to meet the demands of anonymity,threshold traceability,and resisting external masquerade attack and consistency attack.

关 键 词：匿名认证 追踪性 门限性 可验证性 LAGRANGE插值 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]