利用JAVA卡實做群體導向電子信封與簽章

隨著科技的發展，電子簽章與電子信封在現今的電子商務中越發重要。一個組織持有一組密鑰/公鑰來代表這個組織的情況也越來越普遍。對於這種情況，群體導向門檻理論提供了便利而安全的方法來產生群體簽章或是破解密文。任何群體以外的人可以傳送一份以這個群體公鑰加密過的文件給這個群體，而只要參與解密的群體成員人數大於或是等於門檻限制，就可以正確解密這份密文。群體簽章的方面，只要參與簽章的群體成員人數大於或是等於門檻人數，就能夠產生有效的群體簽章，而任何群體以外的人都可以簡單的驗證這份簽章的有效性。在這份論文裡，我們應用了沒有密鑰認證中心的門檻理論，群體簽章和解密都是由參與成員產生，並不需要一個被信任的代理人來處理。根據這個理論我們設計了一個以Java卡實做群體導向門檻電子簽章和信封的系統。Java卡不只可以提供密鑰安全和便利性，更有相當強大的運算能力。利用這些優點，我們可以將和密鑰有關的運算在卡片上進行，讓密鑰不會以未加密過的型態出現在卡片以外。最後我們從實作系統的結果，來討論現今Java 卡的限制和需要提升的弁遄C

關鍵字

電子信封；解密；電子簽章； JAVA卡；門檻理論；群體導向

並列摘要

As technology grows, digital signature and envelop have become more and more important in electronic commerce world. It becomes common that a group owns a secret key/public key to represent the group. A group-oriented threshold scheme provides a secure and convenient way for signing a group signature or decrypting a cipher text. Any outsider can send an encrypted message to this group, the cipher text can be deciphered as long as the participating member number is larger than or equal to the threshold number. And the group signature can be generated as long as the participating member number is larger than or equal to the threshold number. Any outsider can verify the signature. In this paper, we adapted a threshold scheme without Key Authentication Center, signature and decryption are mutually generated without any trust agent involved. We then designed a whole group-oriented threshold signature and envelop system with Java card implementation. Java cards provide not only security and portability for secret keys but also powerful on-card computation capability. This enables us to keep secret value computations on card therefore secret keys are never revealed in plaintext outside Java cards. From performance of our system, we discussed the limitation of today’s Java card.

並列關鍵字

decryption ； Java card ； Group-oriented ； digital envelop ； digital signature ； threshold scheme

參考文獻

1. AGNEW, G.B., MULLIN, R.C., and VANSTONE, S>A.: “Improved digital signature scheme based on discrete exponentiation”, Electronics Letters, 1990, 26, (14), pp.1024-1025.

4. DESMEDT,Y. : “Some Recent Research Aspects of Threshold Cryptography”.

5. DESMEDT,Y. : “Society and group oriented cryptography: a new concept “,in ‘Advances in Cryptology’. Proceeding of Crypto ’87, pp120-127,16-20 August 1988.

9. DESMEDT,Y., FRANKEL,Y. : “Shared generation of authenticators”, in “Advances in Cryptology”. Proceedings of Crypto ’91, pp.11-15 August 1991.

10. DESMEDT,Y., FRANKEL,Y. : “Homomorphic zero-knowledge threshold schemes over any finite abelian group”. SIAM Journal on Discrete Mathematics, 7(4), pp.667-679, November 1994.

國際替代計量

利用JAVA卡實做群體導向電子信封與簽章

全文下載

主題瀏覽