基于门限ECDSA的定期可更新的比特币密钥管理方案  

A PERIODIC RENEWING BITCOIN KEY MANAGEMENT SCHEME BASED ON THRESHOLD ECDSA

作　　者：韩妍妍[1,2] 徐鹏格 李兆斌[2] 魏占祯[2] Han Yanyan;Xu Pengge;Li Zhaobin;Wei Zhanzhen(School of Telecommunications Engineering,Xidian University,Xi’an 710071,Shaanxi,China;Department of Communication Engineering,Beijing Electronic Science and Technology Institute,Beijing 100070,China)

机构地区：[1]西安电子科技大学通信工程学院,陕西西安710071 [2]北京电子科技学院通信工程系,北京100070

出　　处：《计算机应用与软件》2021年第9期307-314,321,共9页Computer Applications and Software

基　　金：国家自然科学基金项目(61772047);中央高校基本科研业务费资助项目(328201801)。

摘　　要：针对中小企业或公司对比特币联合管理问题,提出一种基于门限ECDSA的密钥可更新的比特币密钥管理方案。利用门限ECDSA实现对比特币交易的联合签名,从而防止单个恶意成员或恶意软件匿名地、不可逆转地清空团体所有的资金。全体成员还可定期对所持私钥进行更新,使得攻击者必须在有限时间内至少盗取阈值数量的私钥才能窃取比特币,这增大了攻击者的攻击难度。安全分析表明,在有效保证成员匿名性的前提下,整个方案同时具备去中心化、比特币地址不可伪造、数字签名不可伪造、抵御合谋攻击四大安全特性。Aiming at the joint management problem of bitcoin in small and medium-sized enterprises or companies,this paper proposes a periodic renewing bitcoin key management scheme based on threshold ECDSA.A joint signature of bitcoin transactions was implemented by using a threshold ECDSA,which could prevent a single malicious member or malware from erasing all funds of the group anonymously and irreversibly.All members could update their private keys regularly,so that the attacker must steal at least a threshold number of private keys in a limited time to steal bitcoin,which increased the attack difficulty of the attacker.The security analysis shows that under the premise of the anonymity of members,our scheme has four security features at the same time,which are decentralization,the unforgeability of bitcoin address,the unforgeability of digital signatures and resisting collusion attack.

关 键 词：比特币 密钥管理 区块链 秘密共享 ECDSA 门限签名 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]