普适环境中基于身份的跨域认证方案

Identity-based cross-domain authentication scheme in pervasive computing environments

利用椭圆曲线加法群提出了一种基于身份的签名算法,算法中签名的验证结果相对于签名者身份是一个常量,该算法可保证跨域认证中用户身份的匿名性,并且避免了复杂的双线性对运算。基于该算法设计了一种普适环境中的跨域认证方案,方案中用户利用该算法对时戳签名作为认证信息,在实现安全跨域认证的同时实现了用户匿名性。分析表明,该方案同时具有安全和效率上的优势,更加适合在普适环境下应用。

An identity-based signature scheme was proposed based on additive elliptic curve group.The verification result of the signature was a constant with respect to the signer＇s identity.The scheme could guarantee user anonymity in the process of cross-domain authentication and avoided the pairing operation.Then a cross-domain authentication scheme was constructed by combining the proposed signature scheme.During the authentication,a user constructed the signature of timestamp as authentication proof,which realized secure cross-domain authentication and user anonymity.It is shown that the proposed scheme has superiority in both security and efficiency,and is more suitable for pervasive computing.