检索结果-南通市图书馆

tsrCert:Traceable Self-Randomization Certificate and Its Application to Blockchain Supervision

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Tsinghua Science and Technology 2023年第6期28卷 1128-1147页

作者： Yan Zhu Haibin Zheng Bo Qin Wanting Fu Zhenwei Guo Yujue Wang Qianhong Wu Bingyu Li Xuan Ding School of Cyber Science and Technology Beihang UniversityBeijing 100191China Hangzhou Innovation Institute Beihang UniversityHangzhou 310051China key Laboratory of Cryptography of Zhejiang Province Hangzhou Normal UniversityHangzhou 311121China School of Information Renmin University of ChinaBeijing 100872China School of Software and BNRist Tsinghua UniversityBeijing 100084China

Traditional public key infrastructure(PKI)only provides authentication for network communication,and the standard X.509 certificate used in this architecture reveals the user’s identity.This lack of privacy protection no longer satisfies the increasing demands for personal privacy.Though an optimized anonymous PKI certificate realizes anonymity,it has the potential to be abused due to the lack of identity tracking.Therefore,maintaining a balance between user anonymity and traceability has become an increasing requirement for current PKI.This paper introduces a novel traceable self-randomization certificate authentication scheme based on PKI architecture that achieves both anonymity and traceability.We propose a traceable self-randomization certificate authentication scheme based on the short randomizable signature.Specifically,certificate users can randomize the initial certificate and public key into multiple anonymous certificates and public keys by themselves under the premise of traceability,which possesses lower computational complexity and fewer interactive operations.Users can exhibit different attributes of themselves in different scenarios,randomizing the attributes that do not necessarily need to be displayed.Through security and performance analysis,we demonstrate the suitability of the improved PKI architecture for practical applications.Additionally,we provide an application of the proposed scheme to the permissioned blockchain for supervision.

关键词： public key infrastructure traceable self-randomization certificate randomizable signature anonymity and traceability blockchain supervision

An Efficient Heterogeneous Ring Signcryption Scheme for Wireless Body Area Networks

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Systems Science & Engineering 2023年第11期47卷 2061-2078页

作者： Qingqing Ning Chunhua Jin Zhiwei Chen Yongliang Xu Huaqi Lu Faculty of Computer&Software Engineering Huaiyin Institute of TechnologyHuai’an233003China

Wireless body area networks(WBANs)are an emerging technology for the real-time monitoring of physiological signals.WBANs provide a mechanism for collecting,storing,and transmitting physiological data to healthcare providers.However,the open wireless channel and limited resources of sensors bring security challenges.To ensure physiological data security,this paper provides an efficient Certificateless public key infrastructure Heterogeneous Ring Signcryption(CP-HRSC)scheme,in which sensors are in a certificateless cryptosystem(CLC)environment,and the server is in a public key infrastructure(PKI)environment.CLC could solve the limitations of key escrow in identity-based cryptography(IBC)and certificate management for public keys in PKI.While PKI is suited for the server because it is widely used on the Internet.Furthermore,this paper designs a ring signcryption method that allows the controller to anonymously encrypt physiological data on behalf of a set of sensors,but the server does not exactly know who the sensor is.The construction of this paper can achieve anonymity,confidentiality,authentication,non-repudiation,and integrity in a logically single step.Under the computational Diffie-Hellman(CDH)problem,the formal security proof is provided in the random oracle model(ROM).This paper demonstrates that this scheme has indistinguishability against adaptive chosen ciphertext attacks(IND-CCA2)and existential unforgeability against adaptive chosen message attacks(EUF-CMA).In terms of computational cost and energy usage,a comprehensive performance analysis demonstrates that the proposed scheme is the most effective.Compared to the three existing schemes,the computational cost of this paper’s scheme is reduced by about 49.5%,4.1%,and 8.4%,and the energy usage of our scheme is reduced by about 49.4%,3.7%,and 14.2%,respectively.

关键词： Wireless body area networks certificateless cryptosystem public key infrastructure security ring singncryption

A framework of physical layer technique assisted authentication for vehicular communication networks

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2010年第10期53卷 1996-2004页

作者： WEN Hong 1,2 , HO PinHan 2 & GONG Guang 2 1 National key Lab of Communication of UESTC, Chengdu 610054, China 2 Department of Electrical Computer Engineering, University of Waterloo, Waterloo, Ontario N2L 3G1, Canada National key Lab of Communication of UESTC Chengdu China Department of Electrical Computer Engineering University of Waterloo Waterloo Canada

In this paper, we introduce a message physical layer assisted message authentication (PAA) framework under public key infrastructure (PKI) in vehicular communication networks. The proposed framework takes advantage of temporal and spatial uniqueness in physical layer channel responses for each transmission pair, in which a trust between two vehicles can be maintained by comparing the current estimated channel response and the previous estimated channel response. We will show that the proposed message authentication framework can achieve high efficiency and minimal authentication delay without compromising the security requirements, which is further verified through both analysis and simulation.

关键词： authentication physical layer public key infrastructure vehicular ad hoc networks

An efficient voting based decentralized revocation protocol for vehicular ad hoc networks

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Digital Communications and Networks 2020年第4期6卷 422-432页

作者： Miraj Asghar Lei Pan Robin Doss Centre for Cyber Security Research and Innovation(CSRI) Deakin UniversityGeelong3220Australia

Vehicular Ad-hoc NETworks(VANETs)enable cooperative behaviors in vehicular environments and are seen as an integral component of Intelligent Transportation Systems(ITSs).The security of VANETs is crucial for their successful deployment and widespread adoption.A critical aspect of preserving the security and privacy of VANETs is the efficient revocation of the ability of misbehaving or malicious vehicles to participate in the network.This is usually achieved by revoking the validity of the digital certificates of the offending nodes and by maintaining and distributing an accurate Certificate Revocation List(CRL).The immediate revocation of misbehaving vehicles is of prime importance for the safety of other vehicles and users.In this paper,we present a decentralized revocation approach based on Shamir’s secret sharing to revoke misbehaving vehicles with very low delays.Besides enhancing VANETs’security,our proposed protocol limits the size of the revocation list to the number of the revoked vehicles.Consequently,the authentication process is more efficient,and the communication overhead is reduced.We experimentally evaluate our protocol to demonstrate that it provides a reliable solution to the scalability,efficiency and security of VANETs.

关键词： VANETs Security Authentication public key infrastructure Decentralized revocation

A DRM System Based on Mobile Agent for Digital Rights Redistribution

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Wuhan University Journal of Natural Sciences 2008年第4期13卷 475-480页

作者： LI Ping LU Zhengding ZOU Fuhao LING Hefei College of Computer Science and Technology HuazhongUniversity of Science and Technology Wuhan 430074 HubeiChina

We propose a digital rights management （DRM） system based on mobile agent to protect the copyrights of content providers. In the system, the content provider creates a time limited blackbox out of an original agent and dispatches it to the user end to enforce DRM functions. The blackbox is an agent that can resist the attacks from the malicious user in a certain time interval. Owing to digital rights redistribution support, the user whose rights belong to redistribution category can transfer his rights to other users. Moreover, by introducing public key infrastructure （PKI） and certificate authority （CA） role, the security of the session can be ensured. An analysis of system security and performance and a comparison with traditional DRM system is given.

关键词： digital rights management public key infrastructure certificate authority mobile agent rights redistribution

Cross-heterogeneous Domain Authentication Scheme Based on Blockchain

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Journal of Artificial Intelligence and Technology 2021年第2期1卷 92-100页

作者： Jing Liu Yixin Liu Yingxu Lai Rongchen Li Siyu Wu Sami Mian College of Computer Science Faculty of Information TechnologyBeijing University of TechnologyBeijing 100124China Shaanxi key Laboratory of Network and System Security Xi’an 710071China Science and Technology on Information Assurance Laboratory Beijing 100072China Engineering Research Center of Intelligent Perception and Autonomous Control Ministry of EducationBeijing 100124China Fan Gongxiu Honors College Beijing University of TechnologyBeijing 100124China University of Pittsburgh PittsburghPA 15260USA

With the rising popularity of the Internet and the development of big data technology,an increasing number of organizations are opting to cooperate across domains to maximize their benefits.Most organizations use public key infrastructure to ensure security in accessing their data and applications.However,with the continuous development of identity-based encryption(IBE)technology,small-and medium-sized enterprises are increasingly using IBE to deploy internal authentication systems.To solve the problems that arise when crossing heterogeneous authentication domains and to guarantee the security of the certification process,we propose using blockchain technology to establish a reliable cross-domain authentication scheme.Using the distributed and tamper-resistant characteristics of the blockchain,we design a cross-domain authentication model based on blockchain to guarantee the security of the heterogeneous authentication process and present a cross-domain authentication protocol based on blockchain.This model does not change the internal trust structure of each authentication domain and is highly scalable.Furthermore,on the premise of ensuring security,the process of verifying the signature of the root certificate in the traditional cross-domain authentication protocol is improved to verify the hash value of the root certificate,thereby improving the authentication efficiency.The developed prototype exhibits generality and simplicity compared to previous methods.

关键词： public key infrastructure identity-based encryption cross-domain authentication blockchain

A Photo Certificate-A Framework for Generating Visualized public key Certificates

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Electronic Science and Technology 2011年第4期9卷 339-344页

作者： Wei-Bin Lee Chien-Chen Huang Chia-Chen Lin Department of Information Engineering and Computer Science Feng Chia University Department of Computer Science and Information Management Providence University

In the proposed photo certificate, the principal component is the image, for example, the user＇s photo. User-related fields, such as the subject＇s name, the issuer＇s name, and the expiration period, which are meaningful to users, are embedded into the surface of the photo by using a visible watermark algorithm, so that the reader can capture this information without the requirement for special software. The remaining fields in the certificate are embedded into a marked photo. Later, the whole photo certificate is eryptographically signed by certification authority （CA） private key to guarantee the integrity of our photo certificate. By such arrangement, the eertificate＇s verification is divided into two layers. The first layer is human visual system oriented and the second layer is the software-oriented. User can determine whether the user＇s photo and its subject＇s name are consistent and cheek whether the expired period is valid first. The second layer＇s verification is lunched only when the first layer＇s verification is passed. To sum up, the proposed photo certificate not only inherits the functions of a traditional certificate, but also provides a friendlier operational environment of X.509 certificate.

关键词： Authentication certificate public key infrastructure two-layer verifications watermarking X.509.