具自我認證之國軍網路申訴機制探討

The Study of the Army Appealing for System with Self-Certified Function on the Internet

蘇品長(Pin-Chang Su) ； 蔡建華(Chien-Hua Tsai) ； 郭文雄(Wing-Shaung Kau) ； 林明慶(Vin-Ching Lin) ； 楊倫青(Lun-Ching Yang)

《國防管理學報》 32卷1期 (2011/05) Pp. 59-72

https://doi.org/10.29496/JNDM.201105.0004

摘要

「國軍申訴制度」，係為保障國軍官兵各項合法權益，以內部程序的形式所設置的一種行政救濟途徑。國防部提供各式申訴管道，其案件之受理申請型式有郵件信箱（端木青信箱）、電話（1985專線）及電子郵件（國防部民意信箱）等，隨著網路的普及與便利性，國軍人員資訊素養提高，建置網路申訴系統不啻是另一申訴管道之選項，但若要發展國軍網路申訴系統，需考量如何有效保護申訴人的隱私，避免其隱私資料曝露，造成困擾，這是一值得深思的課題。本研究以密碼學理論為基礎，透過自我認證機制、盲簽章及橢圓曲線密碼學，以國軍網路申訴制度為對象，設計一個具自我認證、資料保密之網路申訴系統的安全機制，以達到學者Girault所提的公開金鑰密碼系統的Level 3安全等級，可避免憑證中心私鑰被偽照的風險，除了各階段成員身分具自我認證特性外，成員私鑰及認證簽章具不可偽造性，申訴訊息盲簽章具有不可否認性及申訴內容具有保密性等特點外，並可避免網路申訴系統遭冒名申訴所造成申訴作業之人力及時間耗費，抑制網路不實申訴之可能性。本研究具有以下優點：一、以自我認證機制取代認證伺服器電子憑證頒發角色。二、KGC註冊後，不需再透過第三方執行身分認證作業，認證效率高。三、盲簽章方式隱匿申訴資料功能，並防止過程中偽冒與竄改。四、橢圓曲線密碼以更少的金鑰位元長度可達到RSA相同的安全強度。五、申訴內容經由盲化作業，可避免內容洩漏，提高案件偵辦之公正性。

關鍵字

自我認證 ； 橢圓曲線 ； 盲簽章

並列摘要

”The army appealing for system” can pledge various legal rights, following the internet that is very popularly and practically. Setting up the appealing for system on the internet that is another option of appealing for channels; if need expand appealing for systems that must consider how to protect the private secrets of the applicant to avoid data be exposed. The study is based on the theory of code and will pass thru a self-certified system, blinding signatures as well as the elliptic curve in order to design a fully self-certified and a safety organization to pledge data's secrets of appealing for system on the internet. The study has following some merits:1. The issuing role of the self-certified system will replace the electric certificate of the server certified.2. After registering KGC system that don't need pass by the third ID thru the certified process which certified efficiency will be added highly.3. The blinding signatures which function can be hidden the appealing for information and avoid be false copied and amended during processing.4. The code of elliptic curve can use less more length of golden key bit to achieve the safety strength same as the RSA system.5. The appealing for contents can pass thru the blinding operation to avoid the contents be exposed and also can promote the case investigated judgment.

並列關鍵字

Self-Certified ； Elliptic Curve ； Blinding Signatures