无证书的XML多重签名

Certificateless XML Multi-Signature

针对XML电子公文流转系统中公文审批存在多重签名的需求,构建了两种新的XML多重签名研究模型.基于相应的研究模型,提出了一种无证书的XML有序多重签名方案和无证书的XML广播多重签名方案,以解决传统签名在此类应用中存在的签名效率低、可扩展性差等问题.同时分析了两种方案的正确性、在随机预言模型下的不可伪造性,而且无证书的XML有序多重签名方案,克服了已有方案相邻成员可以擅自交换签名顺序的缺点.最后,按照XML数字签名规范化要求,对多重签名的实现过程进行了设计,为XML多重签名在电子政务中的应用提供了可行的解决途径.

According to the demand for multi-signature in the electronic document flow system, two kinds of new XML multi-signature research models are built up. Based on the corresponding research model, this paper proposed a new XML sequential multi-signature scheme and a new XML broadcasting multi-signature scheme, which solve the problems of low efficiency and poor sealability using the traditional signature technology. This paper also analyzed that two kinds of scheme were cor- rect and non-forgeable in the random oracle mode, and the signing sequence of the proposed XML sequential multi-signature scheme was fixed and unable to be changed freely by the signers. Finally, this paper designed the realization process of the proposed XML multi-signature schemes according to the XML signature syntax, which provides a feasible solution for the application of XML multi-signature in E-government system.