基于身份签名的电子护照被动认证方案研究-工业工程专业论文.docxVIP

华中科技 大学硕士 学 华 中 科 技 大 学 硕 士 学 位 论 文 II II Abstract In order to ensure the data security of the e-passports, International Civil Aviation Organization (ICAO) has proposed many kinds of safety mechanisms. Among these, Passive Authentication (PA) is the most fundamental and the only compulsory measure in ICAO standard, which guarantees the chip data authenticity and integrity. The implement scheme of PA, a customized certification-based PKI scheme which was recommended by ICAO, has many drawbacks, such as complex certificate management, resources wasted arising by storing a number of certificates, high costs and low performance et al. So the research on implement scheme for e-passports PA is very important. First the principle of PA is analyzed whose core technology is Digital Signature. Based on this, the implement scheme of PA recommended by ICAO is introduced and analyzed. Next, the theory of Identity-Based Signature (IBS) is introduced. The identity-based signature directly use the user information such as identity or roles as a public key, eliminate the need for certificate publicly available and simplify the operations and management of public keys. Therefore constructing identity-based public key architecture has become a new approach to implement the PA for e-passports. And an efficient and safe IBS algorithm is chosen from the classical algorithms of IBS. With this scheme, an implementation scheme of IBS for e-passports PA is proposed according to the Doc 9303. Then applying the open source IBE algorithm library developed by Stanford University, and unilizing the OpenSSL and the GMP, a concrete IBS scheme is implemented. Finally a system of PA for e-passports based on IBS is proposed with functions of the initialization, configuration and the generation and transfer of the private keys on the server side and the sign/verify of chip data on the client side, which is simple to use and easy to deploy. Keywords: Identity-Based Signature (IBS), Passive Authenticati