可信第三方的伪名签名方案研究  

Study on Pseudonym Signature Scheme of Trusted Third Party

作　　者：陈虹[1] 陈红霖 黄洁 肖成龙[1] 郭鹏飞[1] 金海波 CHEN Hong;CHEN Honglin;HUANG Jie;XIAO Chenglong;GUO Pengfei;JIN Haibo(College of Software,Liaoning Technical University,Huludao,Liaoning 125105,China)

机构地区：[1]辽宁工程技术大学软件学院,辽宁葫芦岛125105

出　　处：《计算机科学与探索》2020年第8期1327-1337,共11页Journal of Frontiers of Computer Science and Technology

基　　金：国家自然科学基金No.61404069;辽宁省教育厅项目No.LJYL050;辽宁省教育厅科学技术研究项目No.LJ2017QL032;国家留学基金资助项目No.201808210401。

摘　　要：互联网中用户资料极易泄露,用户的匿名性和安全性问题亟待解决。伪名签名方案可以使用户在网络通信中保持匿名,但存在认证机构与域管理机构合谋泄露的风险和对违规用户响应慢的问题。针对该问题,提出了可信第三方参与的伪名签名方案。在该方案中,用户首先向认证机构申请允许使用某个伪名的许可证书,然后使用该许可证书向域管理机构申请该伪名的证书,并使用该伪名在域中构建伪名签名,最后通过追踪中心(可信第三方)快速检测可能存在违规操作的用户,由认证机构进行相应的处理。方案通过双重伪名更好地保证了用户的匿名性,降低了中央认证机构的运算成本,提高了系统的门限,并且在获取违规用户真实身份时具有快速响应能力,降低了系统因用户违规操作带来的潜在损失。User data on the Internet are extremely easy to leak,and the anonymity and security issues of users need to be resolved.The pseudonym system can make users remain anonymous in network communication,but there are risks of collusion between authentication agencies and domain management agencies and a slow response to the offending user.Aiming at this problem,a pseudonym signature scheme involving trusted third parties is proposed in this paper.The user first applies to the certificate authority for a license permitting the use of a pseudonym,then uses the license to apply for the pseudonym certificate from the domain authority,and uses the pseudonym to construct a pseudonym signature in the domain.Finally,users with illegal operations are quickly detected by tracking center(trusted third party),and the certificate authority will handle the corresponding processing.The proposed scheme guarantees the anonymity of users better by using double pseudonyms,reduces the operation cost of the certificate authority,improves the threshold of the system,has fast response ability in acquiring the real identity of users who violate the rules,and reduces the potential loss of the system caused by users illegal operations.

关 键 词：伪名签名 双重伪名 去匿名化 部分盲签名 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]