基于二元哈希树的密钥隔离代理签名方案

摘要

给出基于二元哈希树的密钥隔离代理签名方案,该方案可以降低了移动代理滥用攻击和密钥泄漏产生的危害。通过分析,该方案的代理签名的密钥长度是固定的,与隔离时间片段无关。相比之前的密钥隔离方案,方案只需要额外的O（TN）次Hash操作和额外的｜q｜比特存储量。同时,方案安全性可以证明是基于在随机预言机模型下所用的DSS签名方案的安全性。%The paper introduce a new generic key-insulated proxy signature scheme based on binary hash tree,which minimizes the damage caused by the secret key exposure.The size of the proxy signature is constant,and independent of the number of insulated time period.Furthermore,compared with all the previous works,the proposed scheme only has additional O（N） hash computation overheads.Finally,the security can be reduced to the security of the underlying DSS signature scheme in the Random Oracle Model.