工业物联网中服务器辅助且可验证的属性基签名方案

张应辉; 贺江勇; 郭瑞; 郑东

doi:10.7544/issn1000-1239.2020.20200421

工业物联网中服务器辅助且可验证的属性基签名方案

张应辉^1,2,
贺江勇^1,2,
郭瑞^1,2,
郑东^1,2,3

¹(西安邮电大学网络空间安全学院西安 710121)
²(无线网络安全技术国家工程实验室(西安邮电大学) 西安 710121)
³(卫士通摩石实验室北京 100070) ¹(yhzhaang@163.com)

基金项目: 国家重点研发计划项目(2017YFB0802000)；国家自然科学基金项目(61772418,61671377,61802303)；陕西省创新能力支撑计划项目(2020KJXX-052)；陕西省特支计划青年拔尖人才支持计划项目；陕西省重点研发计划项目(2019KW-053,2020ZDLGY08-04)；陕西省自然科学基础研究计划项目(2019JQ-866)；四川省科技计划项目(2017GZDZX0002)；青海省基础研究计划项目(2020-ZJ-701)；西邮新星团队支持计划项目(2016-02)

详细信息

中图分类号: TP309
计量
- 文章访问数: 795
- HTML全文浏览量: 3
- PDF下载量: 347
出版历程
- 发布日期: 2020-09-30

Server-Aided and Verifiable Attribute-Based Signature for Industrial Internet of Things

¹(School of Cyberspace Security, Xi’an University of Posts and Telecommunications, Xi’an 710121)
²(National Engineering Laboratory for Wireless Security (Xi’an University of Posts and Telecommunications), Xi’an 710121)
³(Westone Cryptologic Research Center, Beijing 100070)

Funds: This work was supported by the National Key Research and Development Program of China (2017YFB0802000), the National Natural Science Foundation of China (61772418, 61671377, 61802303), the Innovation Capability Support Program of Shaanxi (2020KJXX-052), the Shaanxi Special Support Program Youth Top-notch Talent Program, the Key Research and Development Program of Shaanxi (2019KW-053, 2020ZDLGY08-04), the Natural Science Basic Research Plan in Shaanxi Province of China (2019JQ-866), the Sichuan Science and Technology Program (2017GZDZX0002), the Basic Research Program of Qinghai Province (2020-ZJ-701), and the New Star Team Program of Xi’an University of Posts and Telecommunications (2016-02).

摘要

摘要: 工业物联网(industrial Internet of things, IIoT)设备通过云端收集和存储数据时，会遇到数据认证和隐私保护等问题.属性基签名(attribute-based signature, ABS)不仅可以实现数据认证，而且可以保护签名者的身份隐私.目前存在的SA-ABS(server-aided ABS)方案中，借助服务器减小了签名者和验证者的计算开销，而且通过抵抗签名者和服务器的共谋攻击保证了服务器辅助验证阶段的安全性.但是，现有的SA-ABS方案都不能对服务器产生的部分签名进行有效性验证，所以存在服务器对部分签名伪造的安全隐患.为克服这一挑战，提出一种服务器辅助且可验证的属性基签名(server-aided and verifiable ABS, SA-VABS)方案，该方案不仅减小了签名者和验证者的计算开销，而且通过抵抗签名者和服务器的共谋攻击来保证服务器辅助验证阶段的安全性，最重要的是对服务器产生的部分签名进行了有效性验证，从而保证了服务器辅助签名产生阶段的安全性.形式化安全性分析表明SA-VABS方案是安全的.仿真实验和对比分析表明SA-VABS方案在保证效率的同时提高了安全性.
- 属性基签名 /
- 服务器辅助 /
- 共谋攻击 /
- 可验证 /
- 隐私保护
Abstract: Industrial Internet of things (IIoT) devices encounter problems such as data authentication and privacy protection when collecting and storing data through the cloud. Attribute-based signature (ABS) can not only realize the data authentication, but also protect the identity privacy of the signer. In the existing server-aided ABS (SA-ABS) schemes, the computational overhead of the signer and the verifier is reduced with the help of the server, and the security of the server-aided verification phase is guaranteed by the defense of collusion attack of the signer and the server. However, none of the existing SV-ABS schemes can verify the validity of partial signature generated by the server, which will lead to a potential risk of partial signature forgery by the server. To overcome this challenge, a novel server-aided and verifiable ABS (SA-VABS) scheme is proposed in this paper, which not only reduces the computational overhead of the signer and the verifier, but also ensures the security of the server-aided verification phase by resisting the collusion attack of the signer and the server. The most important is that the scheme could verify the validity of partial signature generated by the server, so as to ensure the security of generation phase of the server-aided signature. Finally, our formal security analysis verifies the security of the SA-VABS scheme, and simulation experiments as well as comparative analysis indicate that the SA-VABS scheme improves security while ensuring efficiency.
- attribute-based signature (ABS) /
- server-aided (SA) /
- collusion attack /
- verifiable /
- privacy protection

HTML全文

参考文献(0)

施引文献(25)

期刊类型引用(9)

1.	张恩，王梦涛，郑东，禹勇，黄昱晨. 低带宽场景下防合谋多方隐私集合并集协议. 通信学报. 2025(01): 210-221 . 百度学术
2.	李子贤，刘文杰. 求解最小公倍数问题的量子安全多方计算协议. 计算机学报. 2024(06): 1393-1412 . 百度学术
3.	逯绍锋，胡玉龙，逯跃锋. 保护隐私的集合相似性度量协同计算协议. 计算机技术与发展. 2023(01): 137-143 . 百度学术
4.	魏立斐，王勤，张蕾，陈聪聪，陈玉娇，宁建廷. 半可信云服务器辅助的高效隐私交集计算协议. 软件学报. 2023(02): 932-944 . 百度学术
5.	家珠亮，赵雪玲，李顺东. 分布式多重集众数及重数的保密计算. 密码学报. 2023(01): 102-117 . 百度学术
6.	魏立斐，刘纪海，张蕾，宁建廷. 双云辅助的超阈值多方隐私集合交集计算协议. 软件学报. 2023(11): 5442-5456 . 百度学术
7.	赵宗渠，王书静，汤永利，霍亚超，杨丽. 基于理想格的两方隐私集合交集协议. 计算机应用研究. 2023(12): 3795-3799 . 百度学术
8.	徐琳，魏晓超，蔡国鹏，王皓，郑志华. 一个高效的安全两方近似模式匹配协议. 计算机研究与发展. 2022(08): 1819-1830 . 本站查看
9.	魏立斐，刘纪海，张蕾，王勤，贺崇德. 面向隐私保护的集合交集计算综述. 计算机研究与发展. 2022(08): 1782-1799 . 本站查看