无证书的普适环境匿名认证方案

Certificate-Less Based Anonymous Authentication Scheme in Pervasive Computing Environments

摘要: 针对普适环境下的匿名认证问题，利用双线性对的相关特性，提出了一种无证书签名算法，算法中的签名矢量相对于签名者身份是一常量。基于该算法设计了一种匿名认证方案，方案中用户利用该算法对时戳签名作为认证信息，在安全认证的同时实现了用户匿名性。分析表明，用户端认证需要116.1 ms，计算量较小，方案在满足双向认证、用户匿名性和无关联性安全要求的同时，解决了现有方案存在的密钥托管问题。

Abstract: Considered the anonymous authentication in pervasive computing environments, a certificateless signature scheme was proposed based on bilinear parings. The verification result of the signature was a constant with respect to the signer’s identifier. Then an anonymous authentication scheme was constructed by combining the proposed signature scheme. During the authentication, a user constructed the signature of timestamp as authentication proof, which realized secure authentication and user anonymity. It is showed that it takes the client 116.1ms to realize authentication and the proposed scheme has less computation on the client side. It can achieve such security requirements as mutual authentication, user anonymity and non-linkability. Moreover, it resolves the problem of key escrow.