计算机科学与探索 ›› 2014, Vol. 8 ›› Issue (7): 858-867.DOI: 10.3778/j.issn.1673-9418.1310009

• 网络与信息安全 • 上一篇    下一篇

基于证书的多代理签名方案

周才学1+,张  月1,范明钰2   

  1. 1. 九江学院 信息科学与技术学院,江西 九江 332005
    2. 电子科技大学 计算机科学与工程学院,成都 611731
  • 出版日期:2014-07-01 发布日期:2014-07-02

Certificate-Based Multi-Proxy Signature Scheme

ZHOU Caixue1+, ZHANG Yue1, FAN Mingyu2   

  1. 1. School of Information Science and Technology, Jiujiang University, Jiujiang, Jiangxi 332005, China
    2. School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu 611731, China
  • Online:2014-07-01 Published:2014-07-02

摘要: 基于证书的密码体制既能降低公钥管理的高昂费用,又能解决密钥托管问题。多代理签名允许一个原始签名者把他的签名权委托给一群代理签名人,并且只有所有代理签名人合作才能产生有效的代理签名。给出了基于证书的多代理签名的形式化定义和安全模型,并提出了一个不使用双线性对的基于证书的多代理签名方案。在随机预言机模型中,基于离散对数问题假设,对方案进行了不可伪造性的证明。效率分析表明,该方案是高效的。最后,给出了该方案的应用实例。

关键词: 基于证书的密码体制, 多代理签名, 双线性对, 公钥替换攻击, 随机预言机模型

Abstract: Certificate-based cryptosystem can not only reduce the high cost of public key management, but also solve the key escrow problem. Multi-proxy signature allows an original signer to delegate his signing rights to a proxy group, and only the cooperation of all signers in the proxy group can generate a valid proxy signature. This paper presents a new formal definition and a new security model of certificate-based multi-proxy signature, and proposes a concrete scheme without using bilinear pairings. Based on the discrete logarithm assumption, this paper proves the scheme to be unforgeable in the random oracle model. The efficiency analysis shows that the scheme has higher efficiency. At last, this paper gives the application examples.

Key words: certificate-based cryptosystem, multi-proxy signature, bilinear pairings, public key replacement attacks, random oracle model