高效的隐私保护在线开票服务认证方案  

Efficient Privacy Preserving Authentication Scheme for Online E-invoice Service

作　　者：马如慧 曹进 李晖 杨朝中[2] MA Ruhui;CAO Jin;LI Hui;YANG Chaozhong(School of Cyber Engineering,Xidian University,Xi’an 710126,China;National Time Service Center,Chinese Academy of Sciences,Xi’an 710600,China)

机构地区：[1]西安电子科技大学网络与信息安全学院,西安710126 [2]中国科学院国家授时中心,西安710600

出　　处：《电子与信息学报》2022年第3期1075-1085,共11页Journal of Electronics & Information Technology

基　　金：国家重点研发计划(2018YFB0803900);国家自然科学基金(61772404,U1836203);陕西省重点研发计划(2020ZDLGY08-08)。

摘　　要：近年来,发票形式由传统的纸质凭据向电子凭据转变。相比于开具纸质凭据,在线开具电子凭据具有流程简化、成本降低以及便于存储等优势。但是,如何保证在线开具电子凭据服务中实体身份的合法性以及身份信息的隐私性是当前研究的重点问题。为了解决此问题,利用预共享密钥机制,该文提出一种隐私保护在线开具电子凭据的认证方案。在此方案中,合法用户与企业完成交易后可以本地在线发起开票申请,国家税务总局的电子凭据系统成功核验实体身份和交易信息后可为该用户提供电子凭据。安全和性能分析结果表明提出方案可以在耗费较少认证开销的情况下提供鲁棒的安全属性。In recent years,the form of invoice has changed from the traditional paper invoice to e-invoice.Compared with issuing paper invoice,there are the advantages of simpler process,lower cost,and easier storage for online issuing e-invoice.However,how to ensure the legitimacy of user identity and the privacy of identity information in online issuing e-invoice service is the focus issue of current research.In order to solve this issue,by using the pre-shared key mechanism,a privacy preserving authentication scheme for online issuing e-invoice is proposed.By this scheme,a legitimate user who has completed a transaction with an enterprise can initiate an e-invoice request locally and online,and the e-invoice system of the State Administration of taxation can provide the user with e-invoices after verifying the identity information and transaction information successfully.Security and performance analysis results show that the proposed scheme can provide robust security properties with less authentication overhead.

关 键 词：网络 电子凭据 认证 隐私保护 

分 类 号：TN918[电子电信—通信与信息系统] TP393.0[电子电信—信息与通信工程]