大规模延迟容忍网络中基于分级身份签名的认证方案研究

An Authentication Scheme Using Hierarchical Identity Based Signature in Large-scale Delay Tolerant Networks

针对大规模延迟容忍网络中现有认证方案存在通信与计算开销大问题,该文提出适用于大规模延迟容忍网络的高效认证方案。首先设计一种分级身份签名算法,在现有同类算法中计算和通信开销最小,并且具有聚合验签功能。基于该算法设计双向认证方案,并利用聚合验签功能实现并发认证,降低认证开销。基于h-wDBDHI*与ECDDH难题证明了签名算法及方案的安全性。分析与仿真实验表明,该方案的认证开销及认证成功率优于现有方案,更适合在大规模延迟容忍网络中应用。

The existing authentication schemes have the problem of heave calculation and communication overhead in the large-scale delay tolerant network. This paper proposes an authentication scheme for large-scale delay tolerant networks. An efficient hierarchical identity based signature is proposed, which has less overhead compared with the existing schemes and has the aggregate verification property. Based on the proposed signature, an authentication scheme is constructed. A batch authentication is also proposed based on the aggregate verification properties of the signature. The signature and scheme prove to be secure under the h-wDBDHI＊ and ECDDH assumption. The analysis and simulation show that the authentication overhead and successful rate of this scheme are both better than the existing schemes. The scheme is more suitable for the large-scale delay tolerant networks.