Fast Keyed-Verification Anonymous Credentials on Standard Smart Cards
Fast Keyed-Verification Anonymous Credentials on Standard Smart Cards
复制标题
标准智能卡上的快速密钥验证匿名凭证
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
J. Hajny
中科院分区：
文献类型：
--
作者：
J. Camenisch;Manu Drijvers;Petr Dzurenda;J. Hajny
加密匿名证书方案允许用户证明他们的个人属性，如年龄、国籍或门票或预付费通行证的有效性，同时保护他们的隐私，因为这种证明是不可链接的，并且属性可以被选择性地披露。最近，Chase et al.(CCS 2014)注意到，在这样的系统中，典型的设置是凭证颁发者也充当验证者。它们引入了针对此设置量身定做的密钥验证凭据。本文提出了一种针对轻量级设备(主要是智能卡)设计的新型密钥验证凭证系统。通过使用一种新的基于Boneh-Boyen签名的代数MAC，我们获得了与现有方案相比最有效的证明协议。为了展示我们的方案在实际应用中的实用性，包括公共交通或电子政务等大规模服务，我们给出了一个标准的、现成的Multos智能卡的实现。虽然使用了比大多数现有实现高得多的安全参数，但我们获得的性能比当前最先进的实现高出44%以上。
Cryptographic anonymous credential schemes allow users to prove their personal attributes, such as age, nationality, or the validity of a ticket or a pre-paid pass, while preserving their privacy, as such proofs are unlinkable and attributes can be selectively disclosed. Recently, Chase et al. (CCS 2014) observe that in such systems, a typical setup is that the credential issuer also serves as the verifier. They introduce keyed-verification credentials that are tailored to this setting. In this paper, we present a novel keyed-verification credential system designed for lightweight devices (primarily smart cards). By using a novel algebraic MAC based on Boneh-Boyen signatures, we achieve the most efficient proving protocol compared to existing schemes. To demonstrate the practicality of our scheme in real applications, including large-scale services such as public transportation or e-government, we present an implementation on a standard, off-the-shelf, Multos smart card. While using significantly higher security parameters than most existing implementations, we achieve performance that is more than 44% better than the current state-of-the-art implementation.