云计算中高效可即时撤销的无证书签名方案  

Efficient revocable certificateless signature scheme for cloud computing

作　　者：刘艳[1,2] 王丹[1,2] 汪祖民[2] 段茹 LIU Yan;WANG Dan;WANG Zu-min;DUAN Ru(Dalian Key Laboratory of Environmental Perception and Intelligent Control,Dalian University,Dalian 116622,China;School of Information Engineering,Dalian University,Dalian 116622,China)

机构地区：[1]大连大学大连市环境感知与智能控制重点实验室,辽宁大连116622 [2]大连大学信息工程学院,辽宁大连116622

出　　处：《计算机工程与设计》2020年第9期2442-2446,共5页Computer Engineering and Design

基　　金：辽宁省重点研发计划指导计划基金项目(2017104014);辽宁省科学事业公益研究基金项目(20170053)。

摘　　要：针对云计算中无证书签名方案计算代价高、撤销不即时的缺点,提出一种基于椭圆曲线加密的可即时撤销签名方案。采用椭圆曲线标量乘运算降低计算开销,KGC(key generation center)将时间参数加密与系统主密钥结合生成时间密钥,当出现用户密钥泄漏或身份过期时,KGC立即更新撤销时间表中未被撤销用户的时间密钥,防止用户的隐私泄露。理论与仿真分析结果表明,方案在随机预言模型下被证明是安全的,并且能够抵抗已撤销用户的攻击。Aiming at the certificateless signature schemes which have the shortcomings of high computational cost and unimme-diate revocation,an efficient and immediate revocable signature scheme was proposed based on elliptic curve cryptography.Elliptic curve scalar multiplication was used to reduce computational overhead.To prevent the user’s privacy from leaking,time parameter and system master key were combined to generate the time key.When a user’s key leaked or his identity expired,the time key in the revocation schedule was updated immediately by key generation center for those users who had not been revoked.Theoretical and simulation results show that the proposed scheme is secure under the random oracle model against the attack of revoked users.

关 键 词：云计算 无证书签名 椭圆曲线加密 时间密钥 即时撤销 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]