普适环境中基于身份的跨域认证方案

摘要

An identity-based signature scheme was proposed based on additive elliptic curve group. The verification result of the signature was a constant with respect to the signer's identity. The scheme could guarantee user anonymity in the process of cross-domain authentication and avoided the pairing operation. Then a cross-domain authentication scheme was constructed by combining the proposed signature scheme. During the authentication, a user constructed the signature of timestamp as authentication proof, which realized secure cross-domain authentication and user anonymity. It is shown that the proposed scheme has superiority in both security and efficiency, and is more suitable for pervasive computing.%利用椭圆曲线加法群提出了一种基于身份的签名算法,算法中签名的验证结果相对于签名者身份是一个常量,该算法可保证跨域认证中用户身份的匿名性,并且避免了复杂的双线性对运算.基于该算法设计了一种普适环境中的跨域认证方案,方案中用户利用该算法对时戳签名作为认证信息,在实现安全跨域认证的同时实现了用户匿名性.分析表明,该方案同时具有安全和效率上的优势,更加适合在普适环境下应用.