无线漫游认证中可证安全的无证书聚合签名方案  

Provably secure certificateless aggregate signature scheme in wireless roaming authentication

作　　者：许芷岩[1,2] 吴黎兵[1] 李莉[3] 何德彪[1,4] XU Zhi-yan;WU Li-bing;LI Li;HE De-biao(Computer School, Wuhan University, Wuhan 430072, China;College of Computer, Hubei University of Education, Wuhan 430205, China;International School of Software , Wuhan University, Wuhan 430072, China;State Key Laboratory of Software Engineering, Wuhan University, Wuhan 430072, China)

机构地区：[1]武汉大学计算机学院,湖北武汉430072 [2]湖北第二师范学院计算机学院,湖北武汉430205 [3]武汉大学国际软件学院,湖北武汉430072 [4]武汉大学软件工程国家重点实验室,湖北武汉430072

出　　处：《通信学报》2017年第7期123-130,共8页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61501333;No.61572379;No.61472287);湖北省自然科学基金资助项目(No.2015CFA068);武汉市科技计划基金资助项目(No.2016060101010047)~~

摘　　要：无证书聚合签名在实现批验证的同时解决了证书管理和密钥托管问题,在资源受限的无线移动网络中得到广泛应用。首先对一个无线匿名漫游认证方案中的无证书聚合签名进行了安全性分析,指出该方案不能抵抗签名伪造攻击,并提出了一种新的安全高效的无证书聚合签名方案。新方案不需要双线性对操作,在随机预言机模型下证明方案是安全的。与原方案相比,所提方案在提高安全性的同时大大降低了计算开销。Certificateless aggregate signature(CLAS)schemes have been widely applied in resource-constrained wireless mobile networks,because they could not only realize batch validation but also solve the certificate management and key escrow problems.It was shown that a certificateless aggregate signature in an anonymous roaming authentication scheme was vulnerable to the signature forge attack.To address the issue,a new secure and efficient certificateless aggregate signature scheme was presented,which required no bilinear pairing operations.And then the security of the scheme under the ECDLP assumption in the random oracle model was proved.Finally the performance of proposed scheme was evaluated.Compared with the original scheme,the proposal is more secure and the total computational cost is greatly reduced.

关 键 词：可证安全 无证书 聚合签名 抗伪造攻击 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]