| 摘要: |
| 为了满足广播环境下通信数据的机密性和认证性需求以及消息收发双方的匿名性，提出了基于身份的多接收者匿名混合签密机制，满足收发双方的匿名性保护需求，并且接收者具有解密独立性.正确性分析及安全性证明表明，该机制是安全、有效的多接收者匿名混合签密机制.相对于现有方案，除了具有保密性和不可伪造性之外，该机制具有更优的性能，如更高的匿名性、公开验证性等.将该机制改进后，提出了具有收发双方匿名性、公开验证性、不可否认性等安全属性的多接收者多消息混合签密机制，实现了广播通信环境下用户的多消息发送需求. |
| 关键词: 混合签密 多接收者 多消息 匿名性 认证性 机密性 |
| DOI：10.13328/j.cnki.jos.005250 |
| 分类号:TP309 |
| 基金项目:国家重点研发计划（2017YFB0802000）；国家自然科学基金（61572303，61772326）；信息安全国家重点实验室（中国科学院信息工程研究所）开放课题（2017-MS-03）；"十三五"国家密码发展基金（MMJJ20170216）；中央高校基本科研业务费专项资金（GK201702004） |
|
| Anonymous Hybrid Signcryption Scheme with Multi-Receiver (Multi-Message) Based on Identity |
|
ZHOU Yan-Wei1,2, YANG Bo1,2, WANG Qing-Long3
|
|
1.School of Computer Science, Shaanxi Normal University, Xi'an 710062, China;2.State Key Laboratory of Information Security(Institute of Information Engineering, The Chinese Academy of Sciences), Beijing 100093, China;3.School of Information Engineering, Chang'an University, Xi'an 710064, China
|
| Abstract: |
| Authentication and confidentiality, as well as sender and receiver anonymity are essential in broadcast communication. In this paper, an anonymous hybrid signcryption scheme with multi-receiver is proposed using identity-based cryptography. The proposal does not contain receiver's identity list, and the identity of sender is included in an identity set. Thus, it not only obtains the receiver's anonymity, but also achieves the sender's anonymity. Additionally, the proof of security and the analysis of correctness demonstrate that the scheme is secure and effective. Compared with the pre-existing schemes, the proposal enjoys better performances in many perspectives, including confidentiality, unforgeability, higher anonymity of sender and receiver and public verifiability. Moreover, the presented method can be improved to develop an efficient construction of hybrid signcryption scheme with multi-message and multi-receiver, which can obtain these security properties, such as sender and receiver anonymity, public verifiability and non-repudiation. Finally, the new variant can achieve the requirement of sending multi-message in broadcast communication. |
| Key words: hybrid signcryption multi-receiver multi-message anonymity authentication confidentiality |
