CAREER: Secure Multi-Party Protocols

CAREER提案0747541获奖摘要在这个项目中，我们设计了各种多方协议任务的有效安全算法。 这些协议必须是可证明安全的基础上充分理解的密码学假设，他们需要满足这些协议的实际应用所施加的要求，他们需要足够有效，在practice.Among的协议任务，我们解决的私有认证方案，聚合签名方案，动态组密钥协商方案，和主动密码系统。 设计此类协议的挑战是在不做出可能妨碍这些协议在实践中采用的假设的情况下实现效率。 例如，依赖于公钥基础设施的协议不能假设普遍信任的权威，如果协议参与者持有来自多个来源的证书，它们应该保持高效。 此外，一个真正有用的多方协议必须在实际的通信条件下保持高效，例如，如果参与节点没有同步的时钟，或者如果任何两个协议参与者之间的通信机制可能被中断。满足这些效率目标和操作要求的高效安全多方协议的开发依赖于具有新的安全属性的公钥原语的构造，以及寻找新的方法来解决与多方协议相关的基本问题，例如公平性，信任假设所施加的限制以及协议组合下的安全性。该项目还可以对各种计算机系统产生直接影响，提高其可靠性，安全性和隐私属性。 我们的协议的应用前景的例子是提供容错的安全服务，并使组范围的安全机制在ad-hoc和移动的网络。

Award Abstract for CAREER proposal 0747541In this project we design efficient secure algorithms for various multi-party protocol tasks. The protocols must be provably secure based on well-understood cryptographic assumptions, they need to satisfy requirements imposed by the real-world applications of these protocols, and they need to be efficient enough to be usable in practice.Among the protocol tasks we address are private authentication schemes, aggregate signature schemes, dynamic group key agreement schemes, and proactive cryptosystems. The challenge in designing such protocols is to achieve efficiency without making assumptions that would impede the adoption of these protocols in practice. For example, protocols that rely on a public key infrastructure cannot assume universally trusted authorities, and they should remain efficient if protocol participants hold certificates from multiple sources. Moreover, to be truly useful a multi-party protocol must remain efficient in realistic communication conditions, e.g. if the participating nodes do not have synchronized clocks, or if the communication mechanism between any two protocol participants can be disrupted.Development of efficient secure multi-party protocols which meet these efficiency goals and operational requirements relies on construction of public key primitives with novel security properties, and on finding new approaches to fundamental questions related to multi-party protocols, e.g. fairness, limitations imposed by trust assumptions, and security under protocol composition.This project can also have an immediate impact on a variety of computer systems, improving their reliability, security, and privacy properties. Examples of prospective applications of our protocols are provision of fault-tolerant security services, and enabling of group-wide security mechanisms in ad-hoc and mobile networks.