基于格的强指定验证者签名方案  

Lattice based strong designated verifier signature scheme

作　　者：张平[1] 迟欢欢 李金波 尚有林[1] ZHANG Ping;CHI Huanhuan;LI Jinbo;SHANG Youlin(School of Mathematics and Statistics,Henan University of Science and Technology,Luoyang 471003,China)

机构地区：[1]河南科技大学数学与统计学院,洛阳471003

出　　处：《北京航空航天大学学报》2023年第6期1294-1300,共7页Journal of Beijing University of Aeronautics and Astronautics

基　　金：国家自然科学基金(12071112,11471102)。

摘　　要：强指定验证者签名(SDVS)方案允许签名者指定一个验证者,只有指定的验证者才能确保签名是由签名者生成。利用陷门生成算法构造了一种基于格的强指定验证者签名方案,并给出了签名方案的正确性证明。基于改进的小整数解(SIS)问题,在标准模型中证明了所提方案在适应性选择消息攻击下是存在性不可伪造的,基于误差学习(LWE)问题证明了所提方案的不可转移性及签名人身份的隐私性。将所提方案应用到云计算的数据完整性审计机制中,使得只有授权的第三方才拥有数据验证权利,有效保护了用户的隐私。The signer can identify a verifier using the strong designated verifier signature(SDVS)scheme.Only the selected verifier can confirm that the signature was created by the signer.Using the trapdoor generation process,we first built a lattice-based strongly designated verifier signature scheme and demonstrated its accuracy.At the same time,based on the improved small integer solution(SIS)problem,the existential unforgeability of the scheme under adaptive chosen message attack is proved in the standard model.The non-transferability of the technique and the secrecy of the signer’s identity are demonstrated utilizing learning with errors(LWE)problem.In order to successfully protect the user’s privacy,the signature technique is then used to the data integrity audit mechanism in cloud computing.As a result,only the approved third party has the right to verify the data.

关 键 词：格 强指定验证者签名方案 小整数解问题 误差学习问题 强不可伪造性 

分 类 号：V309.3[航空宇航科学技术] TB553[理学—物理]