公开可审计的可修订签名方案

Public Accountable Redactable Signature Scheme

具有可审计性的可修订签名方案(RSS)允许修订人在不与原始签名人交互的情况下删除已签名数据的部分内容,并为余下的数据生成有效签名,支持对数据发布者身份的追溯,为可修订签名面临的恶意修订问题的提供了有效的解决方法。该文首先提出一个新颖的公开可审计的可修订签名方案(PA-RSS)的通用构造,并形式化定义相应的安全模型。利用传统数字签名方案,提出首个PA-RSS的具体设计,可将公开可审计性加入到任意不具有可审计性的可修订签名方案中。并证明该设计具有不可伪造性、隐私性、签名人的公开可审计性以及修订人的公开可审计性。与现有的公开可审计的可修订签名方案相比,该文方案的计算效率更高、通信开销更少,更适用于实现开放共享环境中公开可审计的认证数据修订。

Redactable Signature Scheme(RSS) with accountability allows a redactor to delete some portions of the signed data, and generates a valid signature for the remained data without any interaction with the original signer. It supports to trace the data producer, and is an effective solution to the malicious redaction problem of RSS. A novel design of Public Accountable Redactable Signature Scheme(PA-RSS) is proposed, and its security model is formally defined. The first concrete design of PA-RSS is presented by using the traditional digital signature scheme, which can add public accountability to any RSS without accountability. Its unforgeability, privacy, signer’s public accountability, and redactor’s public accountability are proved.Compared with the existing public accountable RSS, the presented scheme with less communication cost is more efficient, and much more applicable to realize the public accountability of authenticated data redaction in an open and sharable environment.