基于SM9的指定验证者聚合签名方案

李继国; 方淳

doi:10.11959/j.issn.2096-109x.2024053

您当前的位置：

首页 >

文章列表页 >

基于SM9的指定验证者聚合签名方案

学术论文

- 基于SM9的指定验证者聚合签名方案
- Designated verifier aggregate signature scheme based on SM9
- 网络与信息安全学报 2024年10卷第4期页码：63-71
- 作者机构：
  
  福建师范大学计算机与网络空间安全学院，福建福州 350117
- 作者简介：
  
  [ "李继国（1970- ），男，黑龙江齐齐哈尔人，福建师范大学教授，主要研究方向为公钥密码学、云计算安全。" ]
  [ "方淳（2001- ），男，湖北黄冈人，主要研究方向为公钥密码学、云计算安全。" ]
- 基金信息：
  
  国家自然科学基金(62072104;61972095;U21A20465)
- DOI：10.11959/j.issn.2096-109x.2024053
  中图分类号：
- 收稿：2024-04-24，
  
  修回：2024-07-20，
  
  纸质出版：2024-08-25
- 稿件说明：
移动端阅览
李继国, 方淳. 基于SM9的指定验证者聚合签名方案[J]. 网络与信息安全学报, 2024, 10(4): 63-71.

Format: LI J G, FANG C. Designated verifier aggregate signature scheme based on SM9[J]. Chinese Journal of Network and Information Security, 2024, 10(4): 63-71.
李继国, 方淳. 基于SM9的指定验证者聚合签名方案[J]. 网络与信息安全学报, 2024, 10(4): 63-71. DOI： 10.11959/j.issn.2096-109x.2024053.

Format: LI J G, FANG C. Designated verifier aggregate signature scheme based on SM9[J]. Chinese Journal of Network and Information Security, 2024, 10(4): 63-71. DOI： 10.11959/j.issn.2096-109x.2024053.

摘要

聚合签名能够显著提升签名效率，减少签名者的计算代价，降低通信成本，并且能更好地保护签名者的隐私，因此，得到国内外学者的广泛关注。但聚合签名方案大多数采用国外密码算法设计，不符合我国密码技术自主可控的要求。SM9数字签名算法是国内自主研制的标识签名方案，其仅能实现一对一的签名和验证，无法满足多对一的签名和验证需求。针对上述问题，构造了基于SM9的指定验证者聚合签名（designated verifier aggregate signature，DVAS）方案。该方案利用假名和散列函数单向性，避免签名者个人信息泄露。在签名聚合阶段，通过制定验证者控制数据访问权限，实现了签名者的隐私保护。基于

-SDH（

-strong Diffie-Hellman）困难问题，所提方案在随机谕言机模型下证明了安全性。方案分析显示该方案能够避免签名者隐私泄露。理论分析和实验仿真结果表明，与现有聚合签名方案相比，所提方案在单个签名生成和验证方面性能更加优越，并且能有效降低签名批量验证的计算代价，同时具有较高的运算效率，更能适用于云服务等应用场景。

Abstract

Aggregate signatures have been recognized for significantly improving signing efficiency

reducing the computational cost for signers

lowering communication costs

and better protecting the privacy of signers. Currently

many aggregate signature schemes have been designed using foreign cryptographic algorithms

which do not me

et the requirements for independent and controllable cryptography technology in China. The SM9 algorithm

a domestically developed identity-based signature scheme in China

was only capable of achieving one-to-one signature and verification

failing to meet the requirements for multiparty signature and verification. To address these issues

a designated verifier aggregate signature (DVAS) scheme was proposed based on the SM9 signature algorithm. Pseudonyms and the one-way property of hash functions were utilized to prevent the leakage of the signer's personal information. The privacy of the signer was protected during the signature aggregation phase by controlling data access permissions for designated verifiers. The security of the scheme was proven under the random oracle model

based on the

-strong Diffie-Hellman (

-SDH) hard problem. Scheme analysis demonstrates that it could prevent the leakage of the signer's privacy. Theoretical analysis and experimental simulation show that

compared to other similar aggregate signature schemes

the proposed scheme exhibits superior performance in terms of signature generation and verification. The proposed scheme is capable of effectively reducing the computational cost of batch signature verification and offered higher computational efficiency

making it more suitable for applications such as cloud services.

关键词

Keywords

references

BONEH D , GENTRY C , LYNN B , et al . Aggregate and verifiably encrypted signatures from bilinear maps [C ] // Proceedings of the 22nd International Conference on Theory and Applications of Cryptographic Techniques . New York : ACM , 2003 : 416 - 432 .

International Organization for Standardization (ISO) . Information technology-security techniques-digital signatures with appendix-part 3: digital logarithm based mechanisms . ISO/IEC 14888–3:2018 [S ] . Switzerland : International Organization for Standardization , 2018 : 11 .

ALZAHRANI B A , IRSHAD A , ALBESHRI A , et al . A provably secure and lightweight patient-healthcare authentication protocol in wireless body area networks [J ] . Wireless Personal Communications , 2021 , 117 ( 1 ): 47 - 69 .

李尚 , 周志刚 , 张宏莉 , 等 . 大数据安全高效搜索与隐私保护机制展望 [J ] . 网络与信息安全学报 , 2016 , 2 ( 4 ): 21 - 32 .

LI S , ZHOU Z G , ZHANG H L , et al . Prospect of secure-efficient search and privacy-preserving mechanism on big data [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 4 ): 21 - 32 .

HILL J , SZEWCZYK R , WOO A , et al . System architecture directions for networked sensors [J ] . ACM Sigplan Notices , 2000 , 35 ( 11 ): 93 - 104 .

CHEON J H , KIM Y , YOON H J . A new ID-based signature with batch verification [J ] . Cryptology EPrint Archive , 2004 .

LYSYANSKAYA A , MICALI S , REYZIN L , et al . Sequential aggregate signatures from trapdoor permutations [C ] // Proceedings of the 23th International Conference on the Theory and Applications of Crypto-graphic Techniques , Interlaken, Switzerland : Advances in Cryptology-EUROCRYPT 2004 , 2004 : 74 - 90 .

IWASAKI T , YANAI N , INAMURA M , et al . Tightly-secure identity-based structured aggregate signature scheme under the computational Diffie Hellman assumption [C ] // Proceedings of the 2016 IEEE 30th International Conference on Advanced Information Networking and Applications (AINA) . Piscataway : IEEE Press , 2016 : 669 - 676 .

YANG X D , LIU R , WANG M D , et al . Identity-based aggregate signature scheme in vehicle ad-hoc network [C ] // Proceedings of the 2019 4th International Conference on Mechanical, Control and Computer Engineering (ICMCCE) . Piscataway : IEEE Press , 2019 : 1046 - 10463 .

YAO Y Q , LI Z J , GUO H . A unified framework of identity-based sequential aggregate signatures from 2-level HIBE schemes [J ] . Information Sciences , 2020 , 516 : 505 - 514 .

国家密码管理局 . GM/T 0044—2016 SM9标识密码算法 [S ] . 北京 : 中国标准出版社 , 2016 .

State Cryptography Administration . GM/T0044—2016 Information security technology Identity-based cryptographic algorithms SM9 [S ] . Beijing : China Standards Press , 2016 .

国家市场监督管理总局, 国家标准化管理委员会 . 信息安全技术 SM9标识密码算法第2部分: 算法 : GB/T 38635.2—2020 [S ] . 北京 : 中国标准出版社 , 2020 .

State Administration of Market Supervision and State Standardi-zation Administration Committee . Standardization Administration of the People's Republic of China. Information security technology—Identity-based cryptographic algorithms SM9: Part 2: algorithms : GB/T 38635.2—2020 [S ] . Beijing : Standards Press of China , 2020 .

CHENG Z H . Security analysis of SM9 key agreement and encryption [C ] // Proceedings of 14th International Conference , Fuzhou : Information Security and Cryptology , 2019 : 3 - 25 .

胡芯忆 , 何德彪 , 彭聪 , 等 . 一种SM9算法R-ate对的快速实现方法 [J ] . 密码学报 , 2022 , 9 ( 5 ): 936 - 948 .

HU X Y , HE D B , PENG C , et al . A fast implementation of R-ate pairing in SM9 algorithm [J ] . Journal of Cryptologic Research , 2022 , 9 ( 5 ): 936 - 948 .

赖建昌 , 黄欣沂 , 何德彪 . 一种基于商密SM9的高效标识广播加密方案 [J ] . 计算机学报 , 2021 , 44 ( 5 ): 897 - 907 .

LAI J C , HUANG X Y , HE D B . An efficient identity-based broadcast encryption scheme based on SM9 [J ] . Chinese Journal of Computers , 2021 , 44 ( 5 ): 897 - 907 .

LAI J C , HUANG X Y , HE D B , et al . Provably secure online/offline identity-based signature scheme based on SM9 [J ] . The Computer Journal , 2022 , 65 ( 7 ): 1692 - 1701 .

朱留富 , 李继国 , 赖建昌 , 等 . 基于商密SM9的属性基在线/离线签名方案 [J ] . 计算机研究与发展 , 2023 , 60 ( 2 ): 362 - 370 .

ZHU L F , LI J G , LAI J C , et al . Attribute-based online/offline signature scheme based on SM9 [J ] . Journal of Computer Research and Development , 2023 , 60 ( 2 ): 362 - 370 .

崔岩 , 黄欣沂 , 赖建昌 , 等 . 基于SM9的匿名广播加密方案 [J ] . 信息安全学报 , 2023 , 8 ( 6 ): 15 - 27 .

CUI Y , HUANG X Y , LAI J C , et al . Anonymous broadcast encryption based on SM9 [J ] . Journal of Cyber Security , 2023 , 8 ( 6 ): 15 - 27 .

王后珍 , 秦婉颖 , 刘芹 , 等 . 基于身份的群组密钥分发方案 [J ] . 计算机研究与发展 , 2023 , 60 ( 10 ): 2203 - 2217 .

WANG H Z , QIN W Y , LIU Q , et al . Identity based group key distribution scheme [J ] . Journal of Computer Research and Development , 2023 , 60 ( 10 ): 2203 - 2217 .

杨亚涛 , 蔡居良 , 张筱薇 , 等 . 基于SM9算法可证明安全的区块链隐私保护方案 [J ] . 软件学报 , 2019 , 30 ( 6 ): 1692 - 1704 .

YANG Y T , CAI J L , ZHANG X W , et al . Privacy preserving scheme in block chain with provably secure based on SM9 algorithm [J ] . Journal of Software , 2019 , 30 ( 6 ): 1692 - 1704 .

朱宏颖 , 张新有 , 邢焕来 , 等 . 边缘计算环境下轻量级终端跨域认证协议 [J ] . 网络与信息安全学报 , 2023 , 9 ( 4 ): 74 - 89 .

ZHU H Y , ZHANG X Y , XING H L , et al . Lightweight terminal cross-domain authentication protocol in edge computing environment [J ] . Chinese Journal of Network and Information Security , 2023 , 9 ( 4 ): 74 - 89 .

唐飞 , 甘宁 , 阳祥贵 , 等 . 基于区块链与国密SM9的抗恶意KGC无证书签名方案 [J ] . 网络与信息安全学报 , 2022 , 8 ( 6 ): 9 - 19 .

TANG F , GAN N , YANG X G , et al . Anti malicious KGC certificateless signature scheme based on blockchain and domestic cryptographic SM9 [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 6 ): 9 - 19 .

吕尧 , 侯金鹏 , 聂冲 , 等 . 基于SM9算法的部分盲签名方案 [J ] . 网络与信息安全学报 , 2021 , 7 ( 4 ): 147 - 153 .

LYU Y , HOU J P , NIE C , et al . Partial blind signature scheme based on SM9 algorithm [J ] . Chinese Journal of Network and Information Security , 2021 , 7 ( 4 ): 147 - 153 .

POINTCHEVAL D , STERN J . Security arguments for digital signatures and blind signatures [J ] . Journal of Cryptology , 2000 , 13 ( 3 ): 361 - 396 .

WU G , ZHANG F T , SHEN L M , et al . Certificateless aggregate signature scheme secure against fully chosen-key attacks [J ] . Information Sciences , 2020 , 514 : 288 - 301 .

杨小东 , 麻婷春 , 陈春霖 , 等 . 面向车载自组网的无证书聚合签名方案的安全性分析与改进 [J ] . 电子与信息学报 , 2019 , 41 ( 5 ): 1265 - 1270 .

YANG X D , MA T C , CHEN C L , et al . Security analysis and improvement of certificateless aggregate signature scheme for vehicular ad hoc networks [J ] . Journal of Electronics & Information Technology , 2019 , 41 ( 5 ): 1265 - 1270 .

SHEN L M , MA J F , MIAO Y B , et al . Provably secure certificateless aggregate signature scheme with designated verifier in an improved security model [J ] . IET Information Security , 2019 , 13 ( 3 ): 167 - 173 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于隐私集合求交的大模型双向隐私授权

基于PIR增强的可搜索加密方案研究

面向LBS的ADS-B报文定位数据本地化差分隐私保护方法

FL-IoV：基于联邦学习的综合车联网入侵检测方法

面向异构数据的半分布式联邦学习安全聚合