基于身份认证的离线电子支付系统安全性研究

Research on security of identity-based off-line electronic payment

利用椭圆曲线上Weil配对的双线性性质和Euler准测,提出了一种新的基于身份认证的签名加密方案。它集密钥交换、数字签名、和数据加密解密功能于一体,不仅可以获得较快的加密解密速度,辨别消息的真伪,还能抵抗重发密文的攻击。该方案降低了公钥的存储和管理成本,签名长度大约是Guillou-Quisquater签名长度的1/4。利用该方案构造了一种安全的离线电子支付系统,能够有效地防止重复消费、窃听、篡改和高手段的犯罪,并对该系统进行了安全性和有效性分析。

An identity-based signcryption scheme is proposed using the bilinear property of Weil pairing defined on elliptic curves and Euler＇s criterion. The scheme aggregates key exchanging, signature verifying and data encrypting. It not only obtain the quicker velocity ofencryptionanddecryption, distinguish the right message from the wrong message, but also fully resist continuous sending cryptograph attack. The management and storage spending of the public key is efficiently diminished using this scheme. The signature size is only about a quarter of the Guillou-Quisquater signature. A secure system for off-line electronic payment is proposed by using the signcryption scheme. The eavesdropping, tampering and perfect means crime is prevented from effectively. Its security and efficiency performances are also analyzed.