一种改进椭圆曲线安全代理签名方案.docVIP

一种改进的椭圆曲线安全代理签名方案 　　摘 要:为解决基于椭圆曲线的代理签名方案的安全问题,提出一种改进的抗伪造攻击的代理签名方案。该方案通过改进代理签名私钥生成方式和相应的代理签名验证等式的方法,提高了基于椭圆曲线的代理签名方案的安全性。分析表明,新方案解决了以往方案中存在的原始签名者伪造问题,满足强代理签名方案所必须的六种性质,具有无须安全通道的优点并且更为高效。分析结果说明,新方案比以往方案具有更好的安全性和更高的实用性。 　　 　　关键词:代理签名; 椭圆曲线; 椭圆曲线离散对数问题 　　中图分类号:TP309 　　文献标志码:A 　　 　　文章编号:1001-3695(2010)02-0685-04 　　doi:10.3969/j.issn.1001-3695.2010.02.078 　　 　　Improved secure proxy signature scheme based on elliptic curve 　　 　　HU Lan-lan??a,b,c??, ZHENG Kang-feng??a,b,c??, LI Jian??a,b??, HU Zheng-ming??a,b,c??, YANG Yi-xian??a,b,c?? 　　 　　(a.Information Security Center, State Key Laboratory of Networking Switching Technology, b.Key Laboratory of Network Information Attack Defence Technology of MOE, c.National Engineering Laboratory for Disaster Backup Recovery, Beijing University of Posts Telecommunications, Beijing 100876, China) 　　 　　Abstract:To overcome the secure weakness of the existing proxy signature scheme based on elliptic curve, this paper presented an improved proxy signature scheme that could avoid forgery attack. Enhanced the security of the proxy signature scheme based on elliptic curve by improving on the generate form of the private key and the corresponding verification equation of proxy signature. The analysis showed that the new scheme resolved secure problems in the former schemes, met the six aspects of security features needed by strong proxy signature scheme, did not need the support of the secure channel, and was more efficient. The analytic results prove that the new scheme is more secure and practicable. 　　Key words:proxy signature; elliptic curve; elliptic curve discrete logarithm problem (ECDLP) 　　 　　0 引言 　　1996年Mambo等人[1]提出了代理签名的概念并给出了一种代理数字签名方案,此后基于离散对数和素因子分解的代理数字签名方案[2,3]纷纷涌现。代理签名是指原始签名者将其签名权(部分)授予代理者,代理者可以代表原始签名者来行使他的签名权。通过对以往代理签名研究的归纳总结,可以认为,一个可被实际应用的典型代理签名方案应是具备以下特性的强代理签名方案[4,5]: 　　a)可验证性。对于有效的代理签名,验证者能够确信这个签名是原始签名者认可的数字签名,即不但能验证代理签名者生成的代理签名,也能验证原始签名者的授权。 　　b)强可区分性。由代理签名者所签署的代理签名与原始签名者所产生的签名是有区别的,不同的代理签名者生成的代理签