改进的具有前向安全性的无证书代理盲签名方案  

Improved Certificateless Proxy Blind Signature Scheme with Forward Security

作　　者：姜昊堃 董学东[1] 张成[1] JIANG Hao-kun;DONG Xue-dong;ZHANG Cheng(College of Information Engineering,Dalian University,Dalian,Liaoning 116622,China)

机构地区：[1]大连大学信息工程学院,辽宁大连116622

出　　处：《计算机科学》2021年第S01期529-532,共4页Computer Science

基　　金：国家自然科学基金(11401068)。

摘　　要：通过对文献[8]提出的一种基于无证书的前向安全代理盲签名方案进行安全性分析发现,其方案无法抵抗恶意且消极KGC的公钥替换攻击,且该方案不满足不可否认性。针对以上问题,提出了一个改进方案,在用户密钥生成方式上做出了改进,通过单向哈希函数将用户公钥嵌入到部分私钥中,进而约束KGC生成的部分私钥,使得敌手无法伪造出合法密钥对进而冒充原始签名者进行授权。在代理盲签名阶段由消息拥有者的秘密值取代一个盲化因子,不仅能够减小计算量,而且消息拥有者也无法否认曾提供过该消息。安全性分析表明,改进方案能够抵抗恶意且消极KGC的公钥替换攻击并且满足不可否认性。效率分析表明,改进方案比原方案的计算效率更高。Through a security analysis of a certificateless forward security proxy blind signature scheme proposed by reference[8],this paper points out that its scheme cannot resist malicious and negative KGC public key replacement attacks,and the scheme does not satisfy non-repudiation.In view of the above problems,an improved scheme is proposed to improve the user key generation method.The one-way hash function is used to embed the user public key into part of the private key,thereby restricting the part of the private key generated by KGC,so that the adversary cannot forge Authorize by signing the legal key to impersonate the original signer.In the proxy blind signature phase,the secret value of the message owner replaces a blinding factor,which not only reduces the amount of calculation,but also the message owner cannot deny that the message was provided.Security analysis shows that the improved scheme can resist malicious and passive KGC public key replacement attacks and satisfy non-repudiation.The efficiency analysis shows that the improved scheme is more efficient than the original scheme.

关 键 词：数字签名 代理盲签名 无证书密码体制 公钥替换攻击 前向安全性 不可否认性 强盲性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]