新的无证书广义指定验证者聚合签名方案  

New certificateless aggregate signature scheme with universal designated verifier

作　　者：许芷岩[1,2] 吴黎兵[1] 李莉[3] 何德彪[1,4] 

机构地区：[1]武汉大学计算机学院,湖北武汉430072 [2]湖北第二师范学院计算机学院,湖北武汉430205 [3]武汉大学国际软件学院,湖北武汉430072 [4]武汉大学软件工程国家重点实验室,湖北武汉430072

出　　处：《通信学报》2017年第11期76-83,共8页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61501333;No.61572379;No.61472287);湖北省自然科学基金资助项目(No.2015CFA068);武汉科技计划基金资助项目(No.2016060101010047)~~

摘　　要：无证书广义指定验证者聚合签名机制不仅能够解决证书管理和密钥托管问题,而且能够实现批验证和保护签名者的隐私。在资源受限的无线移动网络中有广泛应用。首先,对一种指定验证者聚合签名方案进行安全性分析,通过给出2种具体攻击方法,指出该方案不满足签名不可伪造性。为了增强安全性,提出一种新的无证书广义指定验证者聚合签名方案,并在随机预言机模型下证明该方案是安全的。与原方案相比,新方案在解决安全缺陷的同时大大降低了计算开销。Certificateless aggregate signature（CLAS） schemes with universal designated verifier had been widely applied in resource-constrained wireless mobile networks, because they could not only solve the problems of the certificate man-agement and private key escrow, but also realize batch validation and the signer’s privacy protection. A security analysis for a certificateless aggregate signature scheme with universal designated verifier was firstly provided, and two attack methods to demonstrate that their scheme was forgeable was presented. To enhance security, a new certificateless aggre-gate signature scheme with universal designated verifier was proposed, and then the security of the scheme in the random oracle model was proved. The performance of our proposed scheme was finally evaluated. Compared with the original scheme, the pvoposed scheme fixes the security flaws and the total computational cost is greatly reduced .

关 键 词：安全分析 指定验证者 无证书聚合签名 抗伪造攻击 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]