改进的基于DAA的隐私保护云资源消费系统

Improved Privacy Preserving Cloud Resource-payment System with Direct Anonymous Attestation

当前,用户在享受低成本且便捷的云服务的同时,不得不面对个人隐私遭受损害的风险.为此,Pirker等人提出一个允许用户利用资源受限设备匿名消费云资源的系统.该系统的主要缺点是要求用户和云服务供应商执行大量的在线对运算,且并未提供完整的协议实现细节及形式化证明.对Brickell等人的DAA(直接匿名证明)方案进行扩展,并且结合Yang等人的改进的BBS+签名证明协议和Peng等人的小区间证明技术提出一个更为高效的改进系统.改进系统在新定义的安全模型下满足可证安全,且具有如下的显著特点,即无需用户执行在线对运算,利用硬件机制防止恶意用户共享匿名令牌,且适合于在智能手机平台上进行部署.

At present, while users enjoy the low cost and convenient cloud services, they have to face the risk of personal privacy may suffer damage. To propose a solution to this dilemma, Pirker et al. proposed an anonymous cloud resource payment system for users ＇ constrained devices. Unfortunately, the main disadvantage of their system is that users and cloud service providers have to perform a number of expensive online pairing operations. In addition , they did not provide complete descriptive details and formal security proof. This paper proposed a more efficient revised system, which was constructed by extending the DAA （ direct anonymous attestation ） scheme by Brickell et al. and incorporating the improved protocol for proving knowledge of a BBS ＋ signature by Yang etc. as well as the range proof with practical small ranges by Peng etc. The improved system is provable secure in a new defined security model, and it has several notable characteristics as follows,i, e. ,it does not require users＇ online pairing operations,it can prevent malicious users sharing their anonymous tokens, and it can be easily deployed on popular intelligent mobile phone platforms.