理性安全的公平两方比较协议  

Rational-security and fair two-party comparison protocol

作　　者：赵搏文 祝遥 肖阳 裴庆祺[2] 李小国 刘西蒙 ZHAO Bowen;ZHU Yao;XIAO Yang;PEI Qingqi;LI Xiaoguo;LIU Ximeng(Guangzhou Institute of Technology,Xidian University,Guangzhou 510555,China;Xidian University State Key Laboratory of Integrated Service Networks,Xi’an 710071,China;School of Computing and Information Systems,Singapore Management University,Singapore 178902,Singapore;College of Computer and Data Science,Fuzhou University,Fuzhou 350108,China)

机构地区：[1]西安电子科技大学广州研究院,广东广州510555 [2]西安电子科技大学综合业务网国家重点实验室,陕西西安710071 [3]新加坡管理大学计算与信息系统学院,新加坡178902 [4]福州大学计算机与大数据学院,福建福州350108

出　　处：《通信学报》2023年第12期112-123,共12页Journal on Communications

基　　金：国家重点研发计划基金资助项目(No.2022YFB3102700);国家自然科学基金资助项目(No.62202358,No.62072109,No.62376097,No.62102295,No.62202114);中国博士后科学基金资助项目(No.2023TQ0258)。

摘　　要：现有的安全两方比较协议通常是让一方(如Alice)先获知比较结果,然后Alice将比较结果告知另一方(如Bob)。如果Alice拒绝或未将结果发送给Bob,则协议无法保障参与方都拿到比较结果,协议的公平性被破坏。为解决上述问题,结合门限Paillier密码系统与博弈论提出一种理性安全的公平两方比较协议TEAM。具体地,首先利用门限Paillier密码系统设计一种新型的安全两方比较协议。接着引入博弈论机制,探寻所提安全两方比较协议双方均获得比较结果的博弈均衡点。严格的理论分析表明,TEAM保障理性的参与方可在不泄露各自数据的情况下正确地获得比较结果,即TEAM是一个正确、安全且公平的两方比较协议。实验结果显示,同等实验环境下TEAM的计算效率相较于现有的安全两方比较方法运行速度能提升超50倍。Existing secure two-party comparison protocols usually allowed one party(e.g.,Alice)to obtain a comparison result first,and then Alice informed the other one(e.g.,Bob)of the comparison result.Obviously,if Alice refused or failed to send the comparison result to Bob,Bob learned nothing about the comparison result,which broke the fairness of the two-party comparison protocol.Based on this,a rational-security and fair two-party comparison protocol TEAM was proposed by seamlessly combining the threshold Paillier cryptosystem and game theory.Specifically,a novel secure two-party comparison protocol based on the threshold Paillier cryptosystem was designed and then searched for equilib-rium points at which two parties could obtain comparison results.Strict theoretical analysis demonstrate that TEAM guarantees rational two-party to always obtain the comparison result without sacrificing any of their inputs.In other words,TEAM was correct,secure,and fair.In addition,the experimental results show that TEAM improves up to 50 times in terms of efficiency compared with previous methods under the same experimental settings.

关 键 词：安全比较 博弈论 同态加密 门限密码 可信计算 

分 类 号：TN92[电子电信—通信与信息系统]