一种适用于分布式审批工作流的多重短签名方案

Short multi-signature scheme for distributed approval workflow

传统单路线性工作流难以满足高并发、时效性高的管理事务需求,而采用多层网状分布式架构可以有效解决此类问题。针对分布式审批工作流业务系统中存在的数据交互安全问题,提出了一种安全性较高、签名长度较短的多重短签名方案。首先,在随机预言机模型和CDH困难问题假设下,证明了签名方案的安全性;基于此方案设计了分布式审批工作流交互协议,并进行了安全性分析;运用C语言实现了签名方案,并与同类签名方案进行了效率比较;最后对基于此签名方案的应用系统的优势进行了分析。结果表明,该签名方案效率较高、计算量小,因此,基于此方案的分布式审批工作流适用于高并发、时效性要求高的电子政务系统。

Traditional single-route workflows are difficult to meet the high concurrency and time-sensitive management transaction requirements,and multi-layer mesh distributed architecture can effectively solve such problems.Aiming at the problem of data interaction security in the distributed approval workflow business system,this paper proposed a short multi-signature scheme suitable for distributed approval workflow with high security and short signature length.It firstly proved the security of the signature scheme under the random oracle model and the assumption of CDH difficult problem.Then,it designed a distributed approval workflow interaction protocol based on the scheme and carried out the security analysis.It implemented the signature scheme by C language and compared the proposed signature scheme with some similar signature schemes.Finally,the paper analyzed the advantages of the application system based on this signature scheme.The results show that the signature scheme proposed has high efficiency and small amount of calculation.Therefore,the distributed approval workflow based on the scheme is suitable for e-government systems with the demands of high concurrency and time effectiveness.