基于身份的指定验证者签名在跨域认证中的应用  

Research on Application of ID-based Designated Verifier Signature in Cross-domain Authentication

作　　者：王柳 曹珍富 董晓蕾 

机构地区：[1]华东师范大学计算机科学与软件工程学院,上海200240

出　　处：《信息网络安全》2017年第10期63-68,共6页Netinfo Security

基　　金：国家自然科学基金[61632012;61373154]

摘　　要：云计算使用户能够更加便捷地获取各种资源,而用户在获取云服务时的身份认证技术也是云计算安全领域的关键问题。针对在跨域认证中使用OpenID方案容易出现钓鱼攻击、重放攻击等各种漏洞,文章应用基于身份的秘钥交换协议和基于身份的指定验证者签名构造了一个跨域身份认证方案,利用基于身份的秘钥交换和指定验证者的签名的特点来解决OpenID方案中已知的漏洞,并且保护用户的隐私以及整个交互过程中的数据安全。Cloud computing allows users to more easily access to a variety of resources,while it is also a key issue in the cloud computing security field that the identity authentication technology of user access to cloud services. In view of cross domain authentication,the use of Open ID is vulnerable to phishing attacks, replay attacks and other vulnerabilities, the paper mainly proposed a scheme of cross-domain authentication, which based on the ID-based three-party authenticated key agreement protocol and based on the ID-based strong designated verifier signature system to solve the known vulnerabilities in the Open ID, meanwhile protect users＇ privacy and strengthen data security in the entire alternating process.

关 键 词：三方密钥协议 指定验证者的签名 跨域身份认证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]