工业物联网中服务器辅助且可验证的属性基签名方案

Server-Aided and Verifiable Attribute-Based Signature for Industrial Internet of Things

工业物联网(industrial Internet of things,IIoT)设备通过云端收集和存储数据时,会遇到数据认证和隐私保护等问题.属性基签名(attribute-based signature,ABS)不仅可以实现数据认证,而且可以保护签名者的身份隐私.目前存在的SA-ABS(server-aided ABS)方案中,借助服务器减小了签名者和验证者的计算开销,而且通过抵抗签名者和服务器的共谋攻击保证了服务器辅助验证阶段的安全性.但是,现有的SA-ABS方案都不能对服务器产生的部分签名进行有效性验证,所以存在服务器对部分签名伪造的安全隐患.为克服这一挑战,提出一种服务器辅助且可验证的属性基签名(server-aided and verifiable ABS,SA-VABS)方案,该方案不仅减小了签名者和验证者的计算开销,而且通过抵抗签名者和服务器的共谋攻击来保证服务器辅助验证阶段的安全性,最重要的是对服务器产生的部分签名进行了有效性验证,从而保证了服务器辅助签名产生阶段的安全性.形式化安全性分析表明SA-VABS方案是安全的.仿真实验和对比分析表明SA-VABS方案在保证效率的同时提高了安全性.

Industrial Internet of things(IIoT)devices encounter problems such as data authentication and privacy protection when collecting and storing data through the cloud.Attribute-based signature(ABS)can not only realize the data authentication,but also protect the identity privacy of the signer.In the existing server-aided ABS(SA-ABS)schemes,the computational overhead of the signer and the verifier is reduced with the help of the server,and the security of the server-aided verification phase is guaranteed by the defense of collusion attack of the signer and the server.However,none of the existing SV-ABS schemes can verify the validity of partial signature generated by the server,which will lead to a potential risk of partial signature forgery by the server.To overcome this challenge,a novel server-aided and verifiable ABS(SA-VABS)scheme is proposed in this paper,which not only reduces the computational overhead of the signer and the verifier,but also ensures the security of the server-aided verification phase by resisting the collusion attack of the signer and the server.The most important is that the scheme could verify the validity of partial signature generated by the server,so as to ensure the security of generation phase of the server-aided signature.Finally,our formal security analysis verifies the security of the SA-VABS scheme,and simulation experiments as well as comparative analysis indicate that the SA-VABS scheme improves security while ensuring efficiency.