支持LSSS访问结构的属性基群签名方案的研究  

Research on Attribute-based Group Signature Scheme Supporting LSSS Access Structure

作　　者：许玉岚 陈燕俐 高诗尧 XU Yu-lan;CHEN Yan-li;GAO Shi-yao(School of Computer Science,Nanjing University of Posts and Telecommunications,Nanjing 210003,China)

机构地区：[1]南京邮电大学计算机学院、软件学院、网络空间安全学院,江苏南京210003

出　　处：《计算机技术与发展》2021年第9期92-98,共7页Computer Technology and Development

基　　金：国家自然科学基金资助项目(61572263,61272084)。

摘　　要：群签名通过只能验证签名是由群中某一成员签署,但不能确定具体签名者身份来保证匿名性,同时在发生争议时,群管理员可以通过揭示签名者的身份来保证可追踪性。属性基群签名是对群签名的扩展,在保证只有具有特定属性集的群成员可对信息进行签名的同时实现了可追踪性,针对现有的属性基群签名方案仅支持访问树和门限访问结构,提出了一种可支持线性秘密分享(linear secret sharing schemes,LSSS)访问结构,并可实现属性匿名和追踪的属性基群签名方案。方案利用Waters签名技术和Groth-Sahai非交互证明构造群签名,保证只有满足LSSS访问结构属性集合的群用户才可对消息进行签名,并利用承诺系统保证了属性的匿名性和可追踪性,不仅可以追踪到签名用户的身份和属性集,还可以追踪到签名属性集合。方案的通信开销和计算开销较低,签名长度和验证计算开销都和属性的数量无关。最后的安全性证明和性能分析证明了方案的安全性和有效性。A group signature can only verify that the signature is signed by a member of the group,but the identity of the specific signer cannot be determined to guarantee anonymity.Meanwhile,in case of dispute,the group administrator can guarantee traceability by revealing the identity of the signer.Attribute base group signature is an extension of group signature,which guarantees that only group members with specific attribute set can sign information and at the same time implements traceability.Because the existing property group signature scheme only supports access threshold access and tree structure,we propose a access structure of LSSS(linear secret sharing schemes)and can realize the attributes of anonymous and track the group signature scheme.In this scheme,the Waters signature technology and Groth-Sahai non-interactive proof are used to construct a group signature,which ensures that only group users who satisfy the attribute set of LSSS access structure can sign the message,and use the commitment system to ensure the properties of anonymity and traceability of attributes.The scheme can not only track the user’s identity and attribute sets,but also track the signature attribute set.The communication and computation costs of the scheme are low,and the signature length and verification calculation cost are independent of the number of attributes.Finally,the security proof and performance analysis show the safety and effectiveness of the scheme.

关 键 词：群签名 属性基 访问结构 属性匿名 可追踪性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]