基于OT的多方匿名身份查询协议  

Multi-party anonymous identity query protocol based on OT

作　　者：张爱娈 李祯祯 丁海洋[1] 张珍珍 李子臣[1] Zhang Ailuan;Li Zhenzhen;Ding Haiyang;Zhang Zhenzhen;Li Zichen(Center of Digital Copyright Protection Technology Research,Beijing Institute of Graphic Communication,Beijing 102600,China)

机构地区：[1]北京印刷学院数字版权保护技术研究中心,北京102600

出　　处：《计算机应用研究》2022年第4期1190-1194,共5页Application Research of Computers

基　　金：国家自然科学基金资助项目(61370188);北京市教委科研计划一般项目(KM202010015009);北京市教委科研计划资助项目(KM202110015004);北京印刷学院博士启动基金资助项目(27170120003/020);BIGCProject(Ec202007);北京印刷学院校内学科建设项目(21090121021);北京印刷学院校级重点教改项目(22150121033/009)。

摘　　要：多方数据源的隐私信息安全检索是网络安全中亟待解决的问题,不经意传输技术的特点是能够保证各个参与方的数据安全,因此将不经意传输技术与密码学中的同态密码及对称密码相结合,设计了一种多方数据源匿名查询协议。首先,基于不经意传输的思想设计了一种三方匿名查询协议,给出了协议的模型及协议的具体流程。其次,对协议的正确性与安全性进行了证明与分析。最后,将三方匿名查询协议扩展到多方查询协议,并将其应用于数字产品交易中黑名单用户的验证,解决了在网络安全交易过程中买家用户恶意交易问题。实验数据表明,该算法在保证各方数据安全的情况下查询结果正确且效率高。Privacy information security retrieval of multi-party data sources is an urgent problem in network security.The feature of oblivious transfer technology is to ensure the data security of each participant.Therefore,this paper combined oblivious transfer technology with homomorphic encryption and symmetric encryption in cryptography to design an anonymous query protocol for multi-party data sources.Firstly,based on the idea of oblivious transfer,this paper designed a three-party anonymous query protocol,and gave the model of the protocol and the specific process of the protocol.Secondly,this paper proved and analyzed the correctness and security of the protocol.Finally,it extended the three-party anonymous query protocol to the multi-party query protocol,and it applied to the verification of blacklist users in digital product transaction,which solved the problem of malicious transaction of buyer users in the process of network security transaction.Experimental data shows that the algorithm has correct query results and high efficiency under the condition of ensuring the data security of all parties.

关 键 词：不经意传输 同态加密 对称加密 多方数据 网络交易 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]