抗代间污染攻击的网络编码同态签名方案

Homomorphic Signature Scheme for Network Coding Against Inter-generation Pollution Attacks

由于网络编码极易遭受网络中攻击者对数据包的恶意修改,从而使信宿节点对正确数据包的解码造成影响,如果攻击者不断重发与正确数据无关的恶意信息又会造成网络资源的极大浪费,所以为防止该种污染攻击,提出了一种基于代标识符的网络编码同态签名方案。该方案在基于RSA的同态签名方案可防止污染攻击的基础上,通过对每代数据包引入代标识符,从而可进一步防止攻击者的重放攻击。由于方案不需额外安全信道并且采用线性运算,故可降低对节点计算能力的要求及方案安全开销。重点对方案的攻击模式进行了详细分析,并证明了其安全性。最后通过开销分析证明了该方案与基于RSA同态签名方案在开销近似相等的前提下还可有效解决代间污染攻击造成的消息串扰问题。

Because network coding is vulnerable in the network attacker to malicious modification of packet, affecting the correct packet decoding for obtaining-information node. If an attacker continually resends malicious information without relation to correct data, it will lead to enormous waste of network resources. In order to prevent the pollution attack,a generation-identifier based homomorphic signature scheme for network coding is proposed. On the basis of preventing pollution attacks for the RSA-based homomorphic signature scheme,it can prevent the replay attack further by using generation-identifier into packets. This scheme does not need any extra secure channel and uses linear calculation, so it can reduce the requirements of computing ability of the node and the cost of the scheme. The attack mode of the scheme is analyzed in detail,and its security is proved. Finally,the cost analysis proves that on the premise of approximately equal cost between this scheme and the homomorphic signature scheme based on RSA, it also can effectively solve the crosstalk problems caused by inter-generation pollution attack.