无证书数字签名的研究

发布时间：2018-06-13 00:55

本文选题：公钥密码学 + 数字签名　；参考：《吉林大学》2017年硕士论文

【摘要】：随着计算机网络的广泛的应用,数字信息已经成为当今社会信息沟通与交流的主要载体。如何更好的满足这些要求,成为了目前安全研究的重要课题。数字签名作为公钥密码体系的重要分支,在信息的传播过程中,为信息提供了安全性和认证等保障。本文重点对无证书数字签名和无证书聚合签名进行分析与研究。旨在构建一个更加安全的签名协议,从而实现更加安全的认证机制。无证书数字签名主要解决了密钥托管的问题,能够在无需证书的情况下,保证系统用户的公共秘钥是真实并有效的。以下是我们的主要研究成果:1.对王丽莎等人的无证书签名方案进行了两种攻击类的安全性能分析,我们根据之前分析的结果,提出了改进的安全的无证书签名方案。在改进的方案中,依然采用双线性映射,但是增加了部分私钥的复杂性,使得攻击者不能通过计算获取用户的短暂秘钥和秘密值。对改进的方案,我们主要针对公钥替换攻击、恶意的KGC攻击和ESL攻击进行了形影的安全性能的分析和证明。验证了改进的方案能够抵御以上攻击。2.提出了一个新的相对安全的无证书签名方案。该方案通过采用将用户的部分私钥进行封装,从而使得攻击者没有办法通过用户的签名信息来计算出用户的全部私钥信息。从而提高了协议安全的健壮性。能够提供很好的抵御ESL攻击的安全性能。并且我们还给出了该方案对于公钥替换攻击和恶意的KGC攻击的攻击手段的安全性证明。实现了更加安全稳定的签名协议。具有很好的应用价值。3.提出了一个新的无证书聚合签名方案。该方案通过将用户的部分私钥信息与用户生成的一部分签名信息进行统一的封装,使得生成的签名信息能够具有相同的固定长度。在验证时,可以直接通过聚合后的签名直接认证。同时,该方案通过这一步封装,能够实现抵御ESL攻击的安全性能。并分别针对两种攻击手段,提供了基于基于随机预言机模型的CDH问题假设的安全性证明。
[Abstract]:With the wide application of computer network, digital information has become the main carrier of social information communication and communication. How to better meet these requirements has become an important subject of safety research. As an important branch of public key cryptosystem, digital signature provides security and authentication for information. This paper focuses on the analysis and research of certificateless digital signature and certificate-free aggregate signature. The purpose of this paper is to construct a more secure signature protocol to implement a more secure authentication mechanism. Non-certificate digital signature mainly solves the problem of key escrow and can ensure that the public secret key of the system user is true and effective without the certificate. Here is our main research result: 1. In this paper, we analyze the security performance of two kinds of attack classes for the certificate free signature scheme of Lisa Wang et al. Based on the results of the previous analysis, we propose an improved secure certificate free signature scheme. In the improved scheme, bilinear mapping is still used, but the complexity of some private keys is increased, which makes it impossible for an attacker to obtain the transient secret key and secret value of the user by computing. For the improved scheme, we analyze and prove the security performance of public key substitution attack, malicious KGC attack and ESL attack. It is verified that the improved scheme can resist the above attack. 2. A new and relatively secure certificate-free signature scheme is proposed. In this scheme, the partial private key of the user is encapsulated, which makes it impossible for the attacker to calculate all the private key information of the user by means of the signature information of the user. Thus, the robustness of protocol security is improved. Can provide good security performance against ESL attacks. We also prove the security of the scheme for public key substitution attack and malicious KGC attack. A more secure and stable signature protocol is implemented. Has very good application value. A new certificate-free aggregate signature scheme is proposed. The scheme encapsulates part of the private key information of the user and part of the signature information generated by the user so that the generated signature information can have the same fixed length. At the time of verification, it can be directly authenticated by the aggregated signature. At the same time, the security performance of ESL attack can be realized by encapsulating the scheme. The security proof of the assumption of CDH problem based on stochastic prophecy model is provided for two kinds of attack methods.
【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TN918.91

【相似文献】