高效强安全的多策略虚拟企业交互认证方案

发布时间：2019-05-16 06:59

【摘要】：成员企业间的信任交互是虚拟企业所有安全问题的基础和前提。现有的虚拟企业交互认证方案都没有定期更新和多策略认证功能,且有些不能抵抗合谋攻击,有些不具备身份可追查性,有些将盟主放在主导地位,安全性较差。为此,提出了一个多策略、可定期更新的高效强安全虚拟企业动态认证方案,进行了安全性分析和效率对比。方案可实现证书的定期更新;成员加入或退出时无需改变群私钥、其他成员的密钥和证书,减小了方案实施的代价;实现了多策略证书颁发,更能适应不同成员区别认证的需求;方案还具有抗合谋攻击性、签名成员身份可追查性、部分签名可验证性等多种安全优势。仿真实验表明,相对于其他方案,该方案计算效率更高。
[Abstract]:Trust interaction among member enterprises is the basis and premise of all security problems in virtual enterprises. The existing virtual enterprise interactive authentication schemes do not have regular updates and multi-policy authentication functions, and some can not resist collusion attacks, some do not have identity traceability, some put the leader in the dominant position, and the security is poor. Therefore, a dynamic authentication scheme of efficient and strong security virtual enterprise is proposed, which can be updated periodically, and the security analysis and efficiency comparison are carried out. The scheme can realize the periodic update of the certificate, the members do not need to change the group private key when they join or exit, and the keys and certificates of other members reduce the cost of the implementation of the scheme. The scheme also has many security advantages, such as anti-collusion attack, traceability of signature membership, verifiability of partial signature, etc. The scheme also has many security advantages, such as anti-collusion attack, traceability of signature membership, verifiability of partial signature and so on. The simulation results show that the proposed scheme is more efficient than other schemes.
【作者单位】：西南交通大学信息科学与技术学院;四川城市职业学院汽车与信息工程学院;
【基金】：国家自然科学基金(No.61003245,No.61371098) 四川省教育厅2013年度科研项目(No.13ZB0483) 四川省教育厅2014年度科研项目(No.14ZA0346,No.SCJG2014-741)
【分类号】：TP309

【相似文献】