一种基于证书的数字签名方案

A Certificate-Based Digital Signature Scheme

数字签名是实现数字认证的重要工具之一,具有身份合法性认证、抗抵赖、防伪造等特性,普遍应用于网络通信、电子商务等场景。基于证书签名是一种特殊的签名算法,该算法可以同时解决传统数字签名算法的证书验证问题和基于身份数字签名算法的密钥托管问题。文章提出一种基于证书的数字签名方案,证书颁发机构不需要将证书状态信息提供给整个系统,只需要联系证书持有者进行吊销和更新即可。文章所提方案由系统初始化算法、用户密钥生成算法、证书授权算法、签名算法和验证算法构成。文章在随机谕言机模型中证明该方案可以同时抵抗Type I敌手和Type II敌手,满足自适应选择消息攻击下的存在性不可伪造。与其他基于证书签名方案相比,文章所提方案在通信开销方面具有明显优势,更适用于通信资源有限的应用场景。

Digital signature is an important tool to realize digital authentication.It has the characteristics of identity authentication,anti-repudiation,and anti-forgery.Therefore,it is widely used in current network communication,e-commerce and other scenarios.Certificate-based signature is a special signature algorithm that can solve both the certificate verification problem in traditional signature algorithms and the key escrow problem in identity-based signature algorithms.This paper proposed a certificate-based digital signature scheme.The certificate authority did not need to provide certificate status information to the entire system,but only needed to contact the certificate holder for revocation and renewal.The scheme proposed in this paper consisted of system initialization algorithm,user key generation algorithm,certificate authorization algorithm,signature algorithm and verification algorithm,and it was proved in the random oracle model that the scheme can resist both Type I and Type II adversaries.The existence of unforgeability under adaptive chosen message attack was satisfied.Compared with other certificate-based signature schemes,the scheme proposed in this paper has obvious advantages in communication overhead and is more suitable for application scenarios with limited communication resources.