Secure and Anonymous Communication Technique: Formal Model and its Prototype Implementation
Secure and Anonymous Communication Technique: Formal Model and its Prototype Implementation
复制标题
安全匿名通信技术：形式化模型及其原型实现
DOI：
10.1109/tetc.2015.2400131
复制
发表时间：
2016
影响因子：
5.9
通讯作者：
Kazumasa Omote and Takeshi Takahashi
中科院分区：
文献类型：
--
作者：
Keita Emura;Akira Kanaoka;Satoshi Ohta;Kazumasa Omote and Takeshi Takahashi
匿名和端到端加密都被认为是隐私保护通信中的重要属性。然而，需要匿名和端到端加密的安全匿名通信协议无法通过当前匿名通信协议和公钥基础设施（PKI）的简单组合来实现。事实上，当前的 PKI 与匿名性相矛盾，因为用户公钥的证书可以识别该用户。此外，我们认为匿名通信渠道应该具有一定的身份验证机制，因为这样的渠道可能会滋生犯罪通信。为了解决这个问题，我们提出了一种安全和匿名的通信协议，通过采用基于身份的加密来加密数据包而不牺牲匿名性，并使用组签名来进行匿名用户身份验证。通信通过代理实体在协议中进行，这些代理实体向服务提供商 (SP) 隐藏用户 IP 地址。我们还引入了概念验证实现来证明该协议的可行性并分析其性能。最后得出结论：该协议实现了用户与SP之间的安全匿名通信，具有实用性能。
Both anonymity and end-to-end encryption are recognized as important properties in privacy-preserving communication. However, secure and anonymous communication protocol that requires both anonymity and end-to-end encryption cannot be realized through a simple combination of current anonymous communication protocols and public key infrastructure (PKI). Indeed, the current PKI contradicts anonymity because the certificate for a user's public key identifies the user. Moreover, we believe that anonymous communication channels should have certain authentication mechanisms because such a channel could incubate criminal communication. To cope with this issue, we propose a secure and anonymous communication protocol by employing identity-based encryption for encrypting packets without sacrificing anonymity, and group signature for anonymous user authentication. Communication occurs in the protocol through proxy entities that conceal user IP addresses from service providers (SPs). We also introduce a proof-of-concept implementation to demonstrate the protocol's feasibility and analyze its performance. Finally, we conclude that the protocol realizes secure and anonymous communications between users and SPs with practical performance.