基于身份的服务器辅助验证代理重签名方案

摘要

在现有的多数基于身份代理重签名方案中,签名验证过程包含有复杂的双线性对运算,由于执行耗时较长,使其在计算能力较弱的低端计算设备上适用性较低.为提高签名验证效率,结合服务器辅助验证签名和基于身份的代理重签名,引入基于身份的服务器辅助验证代理重签名体制,并给出其安全性定义.设计一个新的服务器辅助验证代理重签名方案,在合谋攻击、自适应选择身份和消息攻击下证明方案的安全性.分析结果表明,该方案将签名验证的大部分计算任务委托给服务器执行,有效减少了双线性对的计算量,降低了签名验证算法的计算复杂度.%Signature verification in the existing ID-based proxy re-signature schemes includes time-consuming bilinear pairing operations,which are not suitable for low-power devices.In order to improve the efficiency of signature verification,combined with server-aided verification signature and ID-based proxy re-signature,the concept of ID-based sever-aided verification proxy re-signature is introduced and its security definition is presented.An ID-based sever-aided verification proxy re-signature scheme is designed,which is proven to be secure under collusion attack,adaptive chosen identity and message attacks.Analysis results show that most computing tasks of signature verification in the proposed scheme can be accomplished by a server,and the computation of bilinear pairing is effectively reduced.Hence,this scheme greatly reduces the computational complexity of the signature verification algorithm,and is more efficient than the existing ID-based proxy re-signature schemes.