Forward-Secure Proxy Signature Scheme for Multiple Proxy Signers using DSA with Proxy Revocation
Forward-Secure Proxy Signature Scheme for Multiple Proxy Signers using DSA with Proxy Revocation
复制标题
使用带有代理撤销的 DSA 的多个代理签名者的前向安全代理签名方案
DOI：
10.1109/iadcc.2009.4809094
复制
发表时间：
2009
期刊：
影响因子：
--
通讯作者：
B. B. Amberker
中科院分区：
文献类型：
--
作者：
N. Sunitha;B. B. Amberker
代理签名方案允许一个用户将他/她的签名能力委托给另一个称为代理签名者的用户，这样后者就可以代表前者签署消息。经过验证后，验证者确信原始签名者对已签名消息的同意。与数字签名一样，这些代理签名也容易受到代理密钥泄露的影响。前向安全签名使签名者能够保证过去签署的消息的安全性，即使他的秘密密钥今天被暴露。将前向安全的概念应用到代理签名中，提出了一种基于DSA（数字签名算法）的前向安全代理签名方案。与现有方案相比，本方案的特殊之处在于，原始签名者可以在不同的时间段内将其签名能力委托给任意数量的代理签名者。虽然原始签名者在协议开始时向所有代理签名者提供代理信息，但代理签名者只能在分配的时间段内生成代理签名。此外，代理签名是前向安全的。此外，我们的方案满足代理签名方案的基本要求以及代理撤销。提供了按需撤销代理（即当原始签名者想要撤销代理签名者时）和自动撤销代理（即在代理签名者的期限届满后立即撤销）。
A proxy signature scheme allows one user to delegate his/her signing capability to another user called a proxy signer in such a way that the latter can sign messages on behalf of the the former. After verification the verifier is convinced of the original signer's agreement on the signed message. Like digital signatures, these proxy signatures are also vulnerable to leakage of proxy secret key. Forward-Secure signatures enable the signer to guarantee the security of messages signed in the past even if his secret key is exposed today. By applying the concept of Forward-Security to proxy signatures, we have come up with a forward secure proxy signature scheme based on DSA(Digital signature algorithm). Compared to existing schemes, the special feature of our scheme is that an original signer can delegate his signing capability to any number of proxy signers in varying time periods. Though the original signer gives proxy information to all the proxy signers at the beginning of the protocol, the proxy signers will be able to generate proxy signatures only in their allotted time periods. Further, the proxy signatures are made forward-secure. Moreover, our scheme meets the basic requirements of a proxy signature scheme along with proxy revocation. Both on-demand proxy revocation i.e. whenever the original signer wants to revoke the proxy signer and automatic proxy revocation i.e. immediate revocation after the expiry of the time period of the proxy signer, is provided.