A Traceable Attribute Signature Method Without Trusted Center

Abstract

The invention discloses a traceable attribute signature method without a trusted center. The method comprises initialization, signature key generation, signature generation, signature authentication and signature tracing. The system comprises five modules including an attribute authentication center, a data server, a signer, a receiver and a signature tracer. The attribute authentication center takes charge of managing the attribute of a user, and generating and distributing part of initial private keys of the user. The signer generates own signature private key for signing a file, and transmits the signature private key to the receiver via the data server. The receiver verifies the validity of the signature via public parameters of the system. The signature tracer provides identity registration for the signer in the system, and responds to a signature tracing request of the receiver when necessary. Since the authority of the attribute authentication center is weakened, even if the system is attacked, the security risk of the signature mechanism is greatly reduced. By introducing a signature accountability mechanism, when a malicious user in the system spreads invalid information, the identity of the publisher can be accurately positioned and accountability can be given.

Description

technical field [0001] The invention relates to the field of confidential or safe communication of information, including a technology for checking the identity of a system user, in particular to a traceable attribute signature method without a trusted center. Background technique [0002] The attribute-based signature system has been widely used in recent years. The principle is that the signer claims that the signature corresponds to a set of specific attributes, and the verifier verifies this. Its advantages are intuition and flexibility, fine-grained division of identity features, and good anonymity, while meeting the requirements of distributed network systems. However, this mechanism still has security risks. In the traditional attribute-based cryptographic mechanism, the attribute authentication center is completely trusted, is responsible for generating the private keys of all users, and has top-level authority. However, in the actual network environment, the attrib...

AI Technical Summary

Problems solved by technology

[0004] The technical problem to be solved by the present invention is that the authority of the attribute authentication center in the attribute-based signature mechanism is too high, and the lack of accountability mechanism for malicious users

Images