信息网络安全

信息网络安全 ›› 2014, Vol. 14 ›› Issue (8): 67-70.doi: 10.3969/j.issn.1671-1122.2014.08.012

• 技术研究 • 上一篇    下一篇

O2O应用中二维码的混合认证服务系统

张永强1, 唐春明2, 3   

  1. 1.广东数字证书认证中心有限公司,广东广州510100;
    2.广州大学数学与信息科学学院,广东广州510006;
    3.广东数学与交叉科学省普通高校重点实验室（广州大学）,广东广州510006
  • 收稿日期:2014-06-27 出版日期:2014-08-01
  • 作者简介:张永强（1977-）,男,广东,高级工程师,博士,主要研究方向：云计算、信息安全、密码学;唐春明（1972-）,男,湖南,博士生导师,教授,博士,主要研究方向：云计算、信息安全、密码学。
  • 基金资助:
    国家自然科学基金面上项目[11271003]、广东省自然科学基金面上项目[S2012010009950]、广东省高校科技创新项目[2013KJCX0146]、教育部高等学校博士学科点专项科研基金联合资助课题（博导类联合）[20134410110003]

A Hybrid Authentication Service System for 2D Barcode in O2O Application

ZHANG Yong-qiang1, TANG Chun-ming2, 3   

  1. 1.Guangdong Certificate Authority CO. Ltd., Guangzhou Guangdong 510100, China;
    2.School of Mathematics and Information Science, Guangzhou University, Guangzhou Guangdong 510006, China;
    3. Key Laboratory of Mathematics and Interdisciplinary Sciences of Guangdong Higher Education Institutes, Guangzhou University, Guangzhou Guangdong 510006, China
  • Received:2014-06-27 Online:2014-08-01

RichHTML

0

PDF (PC)

278

摘要： 二维码作为一种信息载体,可以实现电子商务应用的线上与线下（O2O）并行互动,为消费者带来更便捷和快速的消费体验。但是,二维码不能有效应对移动互联网环境下的信息泄露、信息篡改、身份认证、抵赖性等安全挑战。文章针对二维码信息容量有限,无法在其中嵌入传统PKI体系的数字证书及证书链的问题,提出了一种结合PKI与IBC密码体制的技术方案,按照预先定义的规则为已持有数字证书的用户生成IBC密钥对,充分利用IBC密码体制中公钥信息量较少的优势。文章设计了密钥对申请及发放的协议流程,以及使用IBC密钥对来完成数字签名及验证的过程,同时借助数字证书的状态来判断用户是否有效,满足在O2O应用过程中的安全需求。该技术方案实现了在已建立PKI体系的场合下完成IBC密钥对的分发,有效解决了二维码在O2O应用中电子标签数据的认证问题,并且建立了基于数字证书的IBC数字签名信任链,满足数据传输的机密性、用户身份识别、信任关系的建立等安全目标,尤其适用于信息容量受到限制的二维码类型。

关键词: 二维码, 线上与线下, 认证服务, PKI, IBC

Abstract: As an information carrier, the 2D barcodes can bring consumers quick and convenient shopping experiences. However, the 2D barcodes must overcome the security challenges in the mobile internet environment, such as information leak and tampering, user authentication and repudiation. The capacity of 2D barcodes used in O2O application is limited and not suitable for embedding the digital certificates and certificate chains to utilize user authentication in traditional PKI system. In this paper, a technical solution is proposed to authenticate the electronic tag data in 2D barcodes, which is combining PKI and IBC cryptography. The length of public key in IBC, which is generated according to dedicated rules from digital certificates of PKI entity, is shortest to be used in 2D barcodes. The private key is securely delivered to the end user using a handshake authentication protocol. The signature and verification process are also designed to meet the security requirements in O2O appliances. Based on the proposal, the private keys of IBC system can be securely transferred to the users, and a trusting chain for the IBC digital signatures is established from the PKI digital certificates. A trusting network framework may be set up to authenticate the electronic tag data, and meet the security challenges in the capacity limited 2D barcodes, including data privacy, user authentication and trusting chain, etc.

Key words: 2D barcode, O2O, authentication service, PKI, IBC

中图分类号: