【摘要】 提出可信模块间安全通信的一种高效的基于自证明公钥的签密方案IDSSS,它可以抵抗不诚实证书签发方(CA)的消息伪造攻击和共谋攻击,且中间人在获得密文后,如果没有接收方密钥则无法知道验证密文的签密者和接收者,实现了密文的匿名性.给出了系统模型并证明了其安全性,包括语义安全性、不可伪造性、密文匿名性和不诚实CA的可追踪性.方案可应用于要求身份隐藏和身份隐私保护的安全传输环境.与其他相似方案比较,IDSSS方案有更强的安全性和更高的计算效率.更多还原

【Abstract】 Message trustworthy and behavior trustworthy are crucial between trusted computing modules.To overcome the key escrow problem and the secure channel issue between trusted computing modules that seem to be inherent to identity(ID)-based signcryption,an efficient ID-based self-certified signcryption scheme(IDSSS) is proposed,which can resist dishonest credential authority’s(CA’s) forging and colluding attacks in trusted computing module(TPM) channel.Security models,including confidentiality,unforgeability,ciphertext anonymity,and dishonest CA tractability,are discussed.The proposed scheme can be used in secure and anonymous transfer requirements such as privacy preserving and identity hiding.更多还原