| 摘要: |
| 环签名作为一种具有隐私保护的认证技术, 在确保消息真实性和完整性的同时为用户提供身份匿名性, 广泛应用于电子投票和区块链交易等场景. 针对恶意用户的匿名滥用与失信行为, 现有环签名方案利用追踪(监管)权威揭示任意用户的真实身份. 然而, 该权威的引入将导致诚实用户的隐私泄露, 打破了匿名性和可追踪性之间的平衡. 为解决上述问题并促进国产密码技术应用发展, 提出基于国密SM2支持非法消息追踪的环签名方案. 所提方案针对单个非法消息设计追踪机制, 其中追踪权威仅能够揭示发布非法消息恶意用户的真实身份, 而诚实用户仍然保持匿名, 从而平衡匿名性和可追踪性. 基于此, 结合多项式技术和默克尔哈希树技术提出扩展方案, 实现任意数量非法消息追踪, 扩大恶意用户监管范围, 同时降低用户验证开销和通信成本. 安全性分析表明所提方案满足不可伪造性、匿名性和可追踪性. 性能分析表明所提方案与相关环签名方案相比具有较好的有效性和实用性. |
| 关键词: SM2 环签名 隐私保护 可追踪性 预限制加密 |
| DOI：10.13328/j.cnki.jos.007660 |
| 分类号:TP309 |
| 基金项目:国家自然科学基金(62472049, 62072054); 陕西省重点研发计划(2024GX-YBXM-078, S2025-JC-YB-0498) |
|
| SM2-based Ring Signature Scheme Supporting Illegal Message Traceability |
|
WANG Chen-Hao, MING Yang, LIU Hang, DENG Yu-Tong, ZHAO Yi
|
|
School of Information Engineering, Chang’an University, Xi’an 710064, China
|
| Abstract: |
| As a privacy-preserving authentication technique, ring signatures preserve user anonymity while ensuring message authenticity and integrity. They are widely used in scenarios such as electronic voting and blockchain transactions. To prevent malicious users from abusing anonymity and engaging in dishonest behavior, existing ring signature schemes employ a tracing authority (or regulatory authority) to reveal the real identities of any user. However, introducing such an authority may lead to privacy leakage for honest users, disrupting the balance between anonymity and traceability. To address these issues and promote the application and development of domestic cryptographic technologies, this study proposes an SM2-based ring signature scheme with traceability for illegal messages. The proposed scheme designs a tracing mechanism for a single illegal message, under which the tracing authority is permitted to reveal only the real identities of malicious users who publish illegal messages, while honest users remain anonymous, thus balancing anonymity and traceability. On this basis, this study further extends the proposed scheme by combining polynomial techniques with Merkle hash tree techniques. As a result, traceability for an arbitrary number of illegal messages is achieved, the scope of supervision over malicious users is expanded, and user verification overhead and communication costs are reduced. Security analysis demonstrates that the proposed scheme achieves unforgeability, anonymity, and traceability. Performance analysis indicates that the proposed scheme offers superior efficiency and practicality compared with existing ring signature schemes. |
| Key words: SM2 ring signature privacy protection traceability pre-constrained encryption |
