改进的基于格的动态群签名方案  

An Improved Dynamic Group Signature Scheme Based on Lattice

作　　者：李子臣[1,2,3] 张玉龙[2,3] 王誉晓 杨亚涛[3] 

机构地区：[1]北京印刷学院信息工程学院,北京102600 [2]西安电子科技大学通信工程学院,陕西西安710071 [3]北京电子科技学院信息安全系,北京100070

出　　处：《武汉大学学报（理学版）》2016年第2期135-140,共6页Journal of Wuhan University:Natural Science Edition

基　　金：国家自然科学基金资助项目(61370188);北京市支持中央高校共建项目--青年英才计划;中央高校基本科研业务费专项资金资助项目

摘　　要：为了提高基于格的群签名的效率和实用性,本文基于小整数解问题(SIS)和错误学习问题(LWE),提出了一个新的基于格的群签名方案.该方案只需要更新一小部分群公钥和群成员私钥就可以有效地加入和撤销群成员,适用于群成员数较多和成员更新比较频繁的群签名,由群成员生成签名私钥,能够抵抗陷害攻击,在随机模型下,具有CPA-匿名性和CCA-追踪性,并且其群签名长度不再依赖于群成员的数量.与现有的方案相比,该方案有效地实现了群成员的加入和撤销,并且减小了签名的长度,更加实用.In order to improve the efficiency and practicability of the group signature,a new group signature scheme was proposed,and its security of CPA-anonymous and CCA-traceable was proved based on the hardness of the LWE（learning with errors）or SIS（short integer solution）problems in the random oracle model.The group members can be added or revoked efficiently by only updating a fraction of group public keys and group member keys.The signature secret key is generated by the group members so that this scheme is anti-trap attacks.Compared with other group schemes over lattice,this scheme can increase and revoke group members more efficiently and can resist track attack,and the size of the signature does not rely on the number of group members any more.This scheme is appropriate for the group signature with more members or the frequent members updating.

关 键 词：格 群签名 最小整数解问题 错误学习问题 动态群 陷害攻击 

分 类 号：TP301.4[自动化与计算机技术—计算机系统结构]