密钥隔离签名体制及其应用研究

发布时间：2018-05-05 04:08

本文选题：密钥泄露 + 密钥进化　；参考：《电子科技大学》2015年硕士论文

【摘要】：当前人们处理的很多业务都移植到了智能终端上,随着办理的业务越来越多,当前智能终端上的数据也越来越敏感。数据泄露成为经济损失中一个不可忽视的部分,而其中威胁最大的就是密钥泄露。当前的密码系统的安全性都是基于密钥机密性的,由此一旦发生了密钥泄露,那么密码系统及其使用者都将受到威胁。为了减少密钥泄露导致的损失,众多学者参与其中,提供了不少解决思路以及应对方案,密钥隔离就是其中之一。鉴于密钥隔离系统在抵御密钥泄漏中的重要性,本文对密钥隔离签名体制以及应用进行了研究。本文主要贡献:1.对密钥隔离签名体制的研究现状进行了综述。本文详细介绍了密钥隔离签名方案的基本概念、形式化定义、安全模型、安全要求以及常用的数学工具。本文还详细分析了经典的密钥隔离签名方案,并对密钥隔离方案的设计原理进行了深入分析。2.本文在研究了密钥隔离签名体制后,根据一种高效的签名方案提出了一个基于身份的平行密钥隔离签名方案。方案不但具有密钥隔离能力,还具有安全密钥更新、无限时间片等安全性能。在效率上本方案要高于其他同类型方案,且在使用JPBC实现的模拟中本方案性能也高于其他同类型方案。3.考虑到当前已有的密钥隔离环签名方案的计算消耗非常大,本文提出了一个高效的基于身份的密钥隔离环签名方案,方案在验证签名时消耗比已有方案小,且安全性没有减少。4.本文由一个具有授权书的部分代理签名方案提出了一个基于身份密钥隔离代理签名方案。本方案除了初始化阶段外,其他阶段包括协商代理签名密钥阶段都不需要PKG参与。且方案设计时还考虑了原签名者、签名代理者以及代理签名密钥发生泄漏的情况,由此做了相应的安全防护。方案在安全性以及效率上表现优异。5.鉴于当前还没有密钥隔离代理盲签名方案,本文提出了第一个密钥隔离代理盲签名方案。方案具有盲签名以及代理签名的特点:能够在代理者不知道欲签名信息的情况下进行签名且即使签名被公布,签名代理者也不知道是什么时候签署的签名。
[Abstract]:At present, a lot of services have been transplanted to intelligent terminals. With more and more services being handled, the data on intelligent terminals are becoming more and more sensitive. Data disclosure is an important part of economic loss, and key leakage is the greatest threat. The security of the current cryptosystem is based on the confidentiality of the key, so once the key leak occurs, the cryptosystem and its users will be threatened. In order to reduce the loss caused by key leakage, many scholars participate in it and provide a lot of solutions and solutions. Key isolation is one of them. In view of the importance of key isolation system in resisting key leakage, the key isolation signature scheme and its application are studied in this paper. The main contribution of this paper is: 1. The research status of key isolation signature is reviewed. In this paper, the basic concept, formal definition, security model, security requirements and common mathematical tools of key isolation signature scheme are introduced in detail. In this paper, the classical key isolation signature scheme is analyzed in detail, and the design principle of key isolation scheme is analyzed in detail. After studying the key-isolated signature scheme, this paper proposes an identity-based parallel key-isolated signature scheme based on an efficient signature scheme. The scheme not only has the ability of key isolation, but also has the security performance of key update, infinite time slice and so on. The efficiency of this scheme is higher than that of other schemes of the same type, and the performance of this scheme is higher than that of other schemes of the same type. Considering the computational cost of the existing key isolation ring signature scheme is very large, this paper proposes an efficient identity-based key isolation ring signature scheme. The scheme consumes less than the existing scheme in verifying the signature, and the security is not reduced by .4. In this paper, an IDK-based isolated proxy signature scheme is proposed by means of a partial proxy signature scheme with authorization. In addition to the initialization phase, the other phases, including the negotiation proxy signature key phase, do not require PKG participation. The original signer, the signature agent and the proxy signature key are also considered in the scheme design, and the corresponding security protection is made. The scheme performs well in security and efficiency. Since there is no blind signature scheme for key isolation proxy, this paper proposes the first key isolation proxy blind signature scheme. The scheme has the characteristics of blind signature and proxy signature: it can sign without knowing the information of the proxy and even if the signature is published, the signer does not know when the signature was signed.
【学位授予单位】：电子科技大学
【学位级别】：硕士
【学位授予年份】：2015
【分类号】：TN918.91

【共引文献】