一种细粒度的属性证书出示方案

摘要

In order to effectively verify X. 509v4 attribute certificate after part of attributes is removed, a fine-grained disclosure scheme is proposed. In this scheme,every attribute in certificate is pretreated,and digital signature of the pre-treated results was generated by attribute authority. In different scenarios, uncorrelated attributes is removed from certificate and essential validation information is calculated by certification owner. The validation information and digital signature in certificate can be used to validate legitimacy of the attributes disclosed. The scheme has some characteristics as follows: strong compatibility,good flexibility, high security and little additional cost.%针对现有X.509v4属性证书在细粒度出示部分属性后无法验证合法性的情况,提出了一种支持属性细粒度出示的证书方案.该方案由属性权威对证书中所有属性进行预处理,并对预处理结果生成签名；证书拥有者能够根据不同的应用场合移除证书中不相关属性,并计算验证证书必需的额外信息；验证方根据这些额外信息及证书中的签名能有效地验证被出示部分属性的合法性.该方案与现有标准兼容,并具有灵活性好、安全性高及付出额外开销小等特点.