理想格上基于身份的可截取签名方案  

Identity-based Content Extraction Signature Scheme on Idea Lattices

作　　者：王庆楠 王克 陈辉焱[1] 辛红彩 姚云飞 王宇 Wang Qingnan;Wang Ke;Chen Huiyan;Xin Hongcai;Yao Yunfei;Wang Yu(Beijing Electronic Science and Technology Institute,Beijing 100070;School of Cyberspace Security,Beijing University of Posts and Telecommunications,Beijing 100876)

机构地区：[1]北京电子科技学院,北京100070 [2]北京邮电大学网络空间安全学院,北京100876

出　　处：《信息安全研究》2025年第1期57-65,共9页Journal of Information Security Research

基　　金：中央高校基本科研业务费专项资金项目(3282023002)。

摘　　要：可截取签名允许签名人根据需要,在不与原始签名人交互的情况下删除已签名中的敏感数据块,并为截取后的数据计算一个公开并且可验证的签名.目前大多数可截取签名方案都是基于传统数论的困难假设构造的,鉴于量子计算机可能构成的威胁,构造能够抵抗量子计算攻击的可截取签名方案尤为重要.因此基于格的Ring-SIS(ring short integer solution)问题,提出一种理想格上基于身份的可截取签名方案,证明了该方案在选择身份和消息攻击下存在不可伪造性和隐私性.理论分析和效率分析表明,相较于同类方案,该方案在功能性上同时具备身份认证、隐私性和抗量子攻击等多种功能,用户公钥尺寸更短、安全性更高、算法耗时更低.Extraction signatures allow the signature holder to remove sensitive data blocks from the signed data without interacting with the original signer,and to compute a public and verifiable signature for the sanitized data.Most existing extraction signature schemes are built on traditional number-theoretic hard assumptions.However,Given the potential threat posed by quantum computers,constructing extraction signature schemes that are resistant to quantum computing attacks.Therefore,this paper proposes an identity-based extraction signature scheme on ideal lattices based on the Ring-SIS(ring short integer solution)problem,proving its unforgeability and privacy under adaptive chosen identity and message attacks.Both theoretical and efficiency analyses show that compared to similar schemes,the proposed scheme in this paper simultaneously possesses multiple functionalities such as identity authentication,privacy,and quantum resistance,with shorter public key sizes,enhanced security,and reduced algorithmic time consumption.

关 键 词：理想格 Ring-SIS 隐私保护 基于身份的密码体制 可截取签名 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]