适用于工业物联网的无证书并行密钥隔离签名

doi:10.3969/j.issn.1671-1122.2018.10.001

信息网络安全 ›› 2018, Vol. 18 ›› Issue (10): 1-9.doi: 10.3969/j.issn.1671-1122.2018.10.001

• 等级保护 • 下一篇

适用于工业物联网的无证书并行密钥隔离签名

陈亚楠^1,², 梅倩³(), 熊虎³, 徐维祥¹

1. 北京交通大学交通运输学院,北京 100044
2. 江西理工大学基础课教学部,江西南昌 330013
3. 电子科技大学信息与软件工程学院,四川成都 610054

收稿日期:2018-07-26 出版日期:2018-10-10 发布日期:2020-05-11
作者简介:
作者简介：陈亚楠（1983—）,男,四川,博士研究生,主要研究方向为信息安全、云计算;梅倩（1995—）,女,江西,硕士研究生,主要研究方向为网络安全、密码学;熊虎（1982—）,男,贵州,副教授,博士,主要研究方向为网络安全、密码学;徐维祥（1956—）,男,辽宁,教授,博士,主要研究方向为云计算、数据挖掘。
基金资助:
国家自然科学基金[61672002,61370026,61672135];“十三五”国家密码发展基金密码理论研究课题[MMJJ20170204];中央高校基本科研业务费专项资金[ZYGX2016J091];四川省科技计划项目[2016JZ0020];广东省科技项目[2016A010101002]

Certificateless Parallel Key-insulated Signature for Industrial Internet of Things

Yanan CHEN^1,², Qian MEI³(), Hu XIONG³, Weixiang XU¹

1. School of Traffic and Transportation, Beijing Jiaotong University, Beijing 100044, China
2. Teaching Department of Basic Course, Jiangxi University of Science and Technology, Nanchang Jiangxi 330013, China
3. School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu Sichuan 610054, China

Received:2018-07-26 Online:2018-10-10 Published:2020-05-11

摘要/Abstract

摘要：

随着工业物联网的快速发展,如何保障签名过程中用户私钥在不安全的云环境中不被泄露已成为亟待解决的问题。为了降低密钥泄露带来的危害,密钥隔离机制成为解决该问题的核心技术之一。无证书签名方案的提出是为了解决复杂的证书管理过程及密钥托管问题,文章将密钥隔离与无证书签名相结合,提出了无证书并行密钥隔离签名概念和安全模型,并给出了具体构造方案,引入两个协助器交替更新签名临时私钥,增强系统抵御密钥泄露能力。文章还在随机预言机模型下证明了该方案的安全性,满足密钥隔离安全的所有性质。

关键词: 工业物联网, 云环境, 并行密钥隔离, 无证书签名, 随机预言模型

Abstract:

With the rapid development of the industrial Internet of things, an urgent problem is to keep the user’s private key during the signing process from being leaked in an insecure cloud environment. To reduce the danger of the private key leakage, the key-insulated mechanism has been introduced. In addition, certificateless signature scheme is proposed to solve the complex certificate management process and key escrow problem. This paper incorporates the key-insulated mechanism and certificateless signature to obtain a certificateless parallel key-insulated signature, which we give the definition and security model of the new system. Two introduced helpers in our scheme can alternately help user update the temporary private keys, which can enhance the security of the system. Besides, the security of the scheme is proved in the random oracle model, which satisfies all the properties of the key-insulated security.

Key words: industrial Internet of things, cloud environment, parallel key-insulated, certificateless signature, random oracle model

中图分类号:

TP309

陈亚楠, 梅倩, 熊虎, 徐维祥. 适用于工业物联网的无证书并行密钥隔离签名[J]. 信息网络安全, 2018, 18(10): 1-9.

Yanan CHEN, Qian MEI, Hu XIONG, Weixiang XU. Certificateless Parallel Key-insulated Signature for Industrial Internet of Things[J]. Netinfo Security, 2018, 18(10): 1-9.

图/表 2

参考文献 19

[1]	HAO Wenjiang, WU Jie.Analysis on Security of Internet of Things[J]. Netinfo Security, 2010, 10(1): 49-50.
	郝文江,武捷. 物联网技术安全问题探析[J]. 信息网络安全,2010,10(1):49-50.
[2]	SADEGHI A R, WACHSMANN C, WAIDNER M.Security and Privacy Challenges in Industrial Internet of Things[C]//IEEE. 52nd ACM/EDAC/IEEE Design Automation Conference, June 8-12, 2015, San Francisco, CA, USA. New Jersey: IEEE, 2015: 1-6.
[3]	GUO Tao, LI Zhitang, PENG Jianxi.Research on Digital Signature Technology[J]. Netinfo Security, 2002, 2(8): 34-36.
	郭涛,李之棠,彭建喜. 数字签名技术[J]. 信息网络安全,2002,2(8):34-36.
[4]	SHAMIR A.Identity-based Cryptosystems and Signature Schemes[C]//Springer. CRYPTO 1984, August 19-22, Santa Barbara, CA, USA. Heidelberg: Springer, 1984: 47-53.
[5]	AL-RIYAMI S S, PATERSON K G. Certificateless Public Key Cryptography[C]//Springer. International Conference on the Theory and Application of Cryptology and Information Security, November 30-December 4, 2003, Taipei, Taiwan, China. Heidelberg: Springer, 2003: 452-473.
[6]	YUM D H, LEE P J.Generic Construction of Certificateless Signature[C]//Springer. Australasian Conference on Information Security and Privacy, July 13-15, 2004, Sydney, Australia. Heidelberg: Springer, 2004: 200-211.
[7]	HUANG Xinyi, SUSILO W, MU Yi, et al.On the Security of Certificateless Signature Schemes from Asiacrypt 2003[C]//Springer. International Conference on Cryptology and Network Security, December 14-16, 2005, Xiamen, China. Heidelberg: Springer, 2005: 13-25.
[8]	ZHANG Zhenfeng, WONG D S, XU Jing, et al.Certificateless Public-key Signature: Security Model and Efficient Construction[C]//Springer. International Conference on Applied Cryptography and Network Security, June 6-9, 2006, Singapore. Heidelberg: Springer, 2006: 293-308.
[9]	LIU J K, AU M H, SUSILO W.Self-generated-certificate Public Key Cryptography and Certificateless Signature/Encryption Scheme in the Standard Model: Extended Abstract[C]//ACM. 2nd ACM Symposium on Information, Computer and Communications Security, March 20-22, 2007, Singapore. New York: ACM, 2007: 273-283.
[10]	HE Debiao, CHEN Jianhua, ZHANG Rui.An Efficient and Provably-secure Certificateless Signature Scheme without Bilinear Pairings[J]. International Journal of Communication Systems, 2012, 25(11): 1432-1442.
[11]	DODIS Y, KATZ J, XU Shouhuai, et al.Key-insulated Public Key Cryptosystems[C]//Springer. International Conference on the Theory and Applications of Cryptographic Techniques, April 28-May 2, 2002, Amsterdam, Netherlands. Heidelberg: Springer, 2002: 65-82.
[12]	GONZÁLEZ-DELEITO N, MARKOWITCH O, DALL’OLIO E. A New Key-insulated Signature Scheme[C]//Springer. International Conference on Information and Communications Security, October 27-29, 2004, Malaga, Spain. Heidelberg: Springer, 2004: 465-479.
[13]	LE Zhengyi, OUYANG Yi, FORD J, et al.A Hierarchical Key-insulated Signature Scheme in the CA Trust Model[C]//Springer. International Conference on Information Security, September 27-29, 2004, Palo Alto, CA, USA. Heidelberg: Springer, 2004: 280-291.
[14]	ZHOU Yuan, CAO Zhenfu, CHAI Zhenchuan.Identity Based Key Insulated Signature[C]//Springer. International Conference on Information Security Practice and Experience, April 11-14, 2006, Hangzhou, China. Heidelberg: Springer, 2006: 226-234.
[15]	WENG Jian, CHEN Kefei, LIU Shengli, et al.Identity-based Key-insulated Signature without Random Oracles[C]//IEEE. 2006 International Conference on Computational Intelligence and Security, November 3-6, 2006, Guangzhou, China. New Jersey: IEEE, 2006: 1253-1258.
[16]	WENG Jian, LI Xiangxue, CHEN Kefei, et al.Identity-based Parallel Key-insulated Signature without Random Oracles[J]. Journal of Information Science & Engineering, 2008, 24(4): 1143-1157.
[17]	WAN Zhongmei, LAI Xuejia, WENG Jian, et al.Certificateless Key-insulated Signature without Random Oracles[J]. Journal of Zhejiang University-Science A, 2009, 10(12): 1790-1800.
[18]	CHEN Yanan, XU Weixiang, XIONG Hu.Strongly Secure Certificateless Key-insulated Signature Secure in the Standard Model[J]. Annals of Telecommunications-Annales Des Télécommunications, 2015, 70(9-10): 395-405.
[19]	WANG Shuo, CHENG Xiangguo, CHEN Yameng, et al.Research on Key-insulated Group Signature Scheme[J]. Netinfo Security, 2017, 17(4): 40-45.
	王硕,程相国,陈亚萌,等. 密钥隔离的群签名方案研究[J]. 信息网络安全,2017,17(4):40-45.

性质	WENG^[16]等人方案	WAN^[17]等人方案	CHEN^[18]等人方案	本文方案
抵御类型I 敌手攻击	√	√	√	√
抵御类型II 敌手攻击	√	×	√	√
抗密钥托管	×	√	√	√
强密钥隔离	√	√	√	√
安全密钥更新	√	√	√	√
允许频繁密钥更新	√	×	×	√

适用于工业物联网的无证书并行密钥隔离签名

Certificateless Parallel Key-insulated Signature for Industrial Internet of Things

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 2

参考文献 19

相关文章 5

编辑推荐

Metrics

本文评价

[1]	胡荣磊, 李文敬, 蒋华, 张昕然. 基于离散对数的无证书聚合签密方案[J]. 信息网络安全, 2019, 19(7): 42-49.
[2]	张玉磊, 马彦丽, 刘文静, 王彩芬. 具有隐私保护特性的证书否认认证加密方案[J]. 信息网络安全, 2018, 18(10): 62-69.
[3]	闫玺玺, 刘媛, 胡明星, 黄勤龙. 云环境下基于LWE的多机构属性基加密方案[J]. 信息网络安全, 2017, 17(9): 128-133.
[4]	闫玺玺, 刘媛, 李子臣, 黄勤龙. 云环境下理想格上的多机构属性基加密隐私保护方案[J]. 信息网络安全, 2017, 17(8): 19-25.
[5]	闫玺玺, 叶青, 刘宇. 云环境下支持隐私保护和用户撤销的属性基加密方案[J]. 信息网络安全, 2017, 17(6): 14-21.