基于群签名的P2P网络匿名通信方法研究

发布时间：2018-10-14 16:51

【摘要】：P2P技术的出现,使人们在资源共享领域创开了新纪元,用户在享受服务的同时,也面临着隐私泄露的威胁。P2P网络中最具代表性的是BitTorrent网络,主要用于资源文件的快速分发与共享,具有参与节点越多,分享速度越快的优势,而深受广大用户的喜爱。然而,用户在使用BitTorrent网络进行资源共享时,难免会暴露自己的身份隐私信息,并且新加入网络的节点由于缺乏身份认证很容易进入恶意网络而造成隐私泄露。因此,基于人们对BitTorrent网络安全性需求的提升,研究具有匿名性和身份认证机制的安全通信机制,对于维护BitTorrent网络性能、保护正常成员的利益以及促进资源共享有着重要的意义。基于BitTorrent网络存在身份认证及用户隐私信息暴露问题,本文结合一种高效的无证书群签名方案,提出了具有安全性的BitTorrent网络通信方案:GS-BT(group signature BitTorrent)系统。该方案的核心思想是,将共享同一个资源文件的用户构建一个群组,通过对资源片段进行群签名再发送给资源请求者,使得在同一个资源共享群组中的用户不知道正在通信用户的身份信息,而第三方攻击者只能判断出消息来自某个群组,而无法获知具体是哪个用户,从而保证了用户在通信过程中的身份隐私。另外,在新成员加入群组时群管理员会通过验证新成员的身份和资源请求信息来判断进入哪个群组,因此能够避免新节点进入恶意的网络群组。最后,为验证改进后的方案可以有效的保护资源共享节点的身份隐私,对本文提出的方案进行了安全性分析和证明。另外,通过与相关方案进行效率比较,分析出本文提出的方案在性能和效率上具有明显的优势。
[Abstract]:The emergence of P2P technology has opened a new era in the field of resource sharing. Users are also facing the threat of privacy disclosure while enjoying services. P2P network is the most representative of the BitTorrent network. It is mainly used for the quick distribution and sharing of resource files. It has the advantage of more participating nodes and faster sharing speed, and is loved by the majority of users. However, when users use BitTorrent network to share resources, it is inevitable to expose their identity privacy information, and the new network nodes can easily enter malicious network because of lack of identity authentication, resulting in privacy disclosure. Therefore, based on the improvement of BitTorrent network security requirements, it is of great significance to study the secure communication mechanism with anonymity and identity authentication mechanism for maintaining the performance of BitTorrent network, protecting the interests of normal members and promoting resource sharing. Based on the problems of identity authentication and user privacy information exposure in BitTorrent networks, a secure BitTorrent network communication scheme, GS-BT (group signature BitTorrent) system, is proposed in this paper, which combines an efficient certification-free group signature scheme. The core idea of the scheme is to construct a group of users who share the same resource file, sign the resource fragment and send it to the resource requester. So that the user in the same resource-sharing group does not know the identity of the user in the communication, while the third-party attacker can only determine the message from a group without knowing which user it is. Thus, the user's identity privacy in the communication process is guaranteed. In addition, when the new members join the group, the group administrator will verify the identity of the new member and resource request information to determine which group to enter, so that the new node can avoid entering a malicious network group. Finally, in order to verify that the improved scheme can effectively protect the identity privacy of resource sharing nodes, the security analysis and proof of the proposed scheme are carried out. In addition, by comparing the efficiency of the proposed scheme with the related schemes, it is found that the proposed scheme has obvious advantages in performance and efficiency.
【学位授予单位】：兰州理工大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TN918

【参考文献】