具有直线提取器的匿名指纹方案

摘要

迄今为止,基于群签名构造匿名指纹方案的问题尚未得到较好地解决.为此,提出一个具有直线提取器的匿名指纹方案,新方案的设计过程使用了关于OR逻辑的 Canard-Gouget-Hufschmitt知识证明技术(CANARD S,GOUGET A,HUFSCHMITT E.A handy multi-coupon system.ACNS 2006:Proceedings of the 4th International Conference on Applied Cryptography and Network Security,LNCS 3989.Berlin:Springer-Verlag,2006:66-81 ),Chida-Yamamoto批量零知识证明与验证技术 (CHIDA K,YAMAMOTO G.Batch processing for proofs of partial knowledge and its applications.IEICE Transactions on Fundamentals of Electronics,Communications and Computer Sciences,2008,E91-A (1):150-159)以及Arita(ARITA S.A straight-line extractable non-malleable commitment scheme.IEICE Transactions on Fundamentals of Electronics,Communications and Computer Sciences,2007,E90-A (7):1384-1394)的直线可提取的承诺方案.需要指出的是,新方案支持并发注册,因此特别适合于基于互联网的应用环境.此外,新方案具有直线提取器,使得安全性证明中的归约算法无需依赖于低效的重绕策略,从而实现了紧密的安全性归约.形式化的安全性分析表明,新方案满足匿名指纹方案要求的所有性质.%Until now, fingerprinting scheme based on anonymous group signature construction has not yet been solved.To solve this problem, an anonymous fingerprinting scheme with straight-line extractors was proposed, which incorporated the technique of the Canard-Gouget-Hufschmitt zero-knowledge proof ( CANARD S, GOUGET A, HUFSCHMITT E.A handy multi-coupon system.ACNS 2006: Proceedings of the 4th International Conference on Applied Cryptography and Network Security, LNCS 3989.Berlin: Springer-Verlag, 2006:66 -81) of the OR statement, the Chida-Yamamoto batch zeroknowledge proof and verification ( CHIDA K, YAMAMOTO G.Batch processing for proofs of partial knowledge and its applications.IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences, 2008, E91-A (1): 150 - 159), and the straight-line extractable commitment scheme of Arita ( ARITA S.A straight-line extractable nonmalleable commitment scheme.IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences,2007, E90-A( 7): 1384 - 1394).To note that, one of the salient features of the new scheme was supporting concurrent registration, so it was especially suitable to be deployed over the Intemet.Moreover, the proposed scheme had straight-line extractors, i.e., the security reduction algorithm did not depend on inefficient rewinding strategy and got tight security reduction.Formal security analysis shows that the proposed scheme achieves all the properties required by anonymous fingerprinting schemes.