SeCrowd: Efficient secure interactive crowdsourcing via permission-based signatures
SeCrowd: Efficient secure interactive crowdsourcing via permission-based signatures
复制标题
DOI：
10.1016/j.future.2020.09.033
复制
发表时间：
2021-02
期刊：
影响因子：
--
通讯作者：
Jing Chen;Jiong Chen;Kun He;Ruiying Du
中科院分区：
文献类型：
--
作者：
Jing Chen;Jiong Chen;Kun He;Ruiying Du
众包是一个强大的范例，通过从一群贡献者那里寻求帮助来提供服务。然而，众包中的安全威胁，特别是在交互式众包中，贡献者相互协作，没有得到很好的研究。可能注入恶意结果的外部对手是众包中所有参与方的主要关注点。在本文中，一个有效的安全的交互式众包框架，称为SeCrowd，提出了保护的真实性在众包平台对外部对手。该框架的特点是最近提出的一个密码原语，称为基于许可的签名，它揭示了签名者的身份只允许验证者，而对他人的保障。通过这种方式，贡献者可以根据他们的签名贡献来识别彼此，但他们的身份对其他用户仍然未知。此外，用户可以验证签名的贡献是否由法律的贡献者做出，而不知道实际签名者的身份，这保证了贡献不能被篡改或伪造。我们证明了SeCrowd在随机预言机模型中实现了不可伪造性。综合分析和实验表明，我们的框架是安全的，在计算和通信成本方面是高效的。
Crowdsourcing is a powerful paradigm to provide services by soliciting help from a pool of contributors. However, the security threats in crowdsourcing, especially in interactive crowdsourcing where contributors interact with each other for collaboration, are not well studied. External adversaries who may inject malicious results are the major concerns of all involved parties in crowdsourcing. In this paper, an efficient secure interactive crowdsourcing framework, called SeCrowd, is proposed to protect the authenticity in the crowdsourcing platform against external adversaries. The framework is characterized by a recently proposed cryptographic primitive, called permission-based signature, which reveals the signer’s identity to permissive verifiers only, while safeguards it against others. In this way, contributors can identify each other based on their signed contributions, but their identities remain unknown to other users. Moreover, users can verify whether the signed contributions are made by legal contributors without being aware of the actual signer’s identities, which guarantees that the contributions cannot be tampered or forged. We prove that SeCrowd achieves unforgeability in the random oracle model. Comprehensive analysis and experiments showed that our framework is secure and highly efficient in terms of computation and communication cost.