CAJ | 학술논문

分析Lee提出的代理多签名方案,给出一种伪造攻击,利用该攻击,一个不诚实的原始签名人在不经过其他原始签名人的同意下,可以成功伪造代理签名密钥,从而可以假冒诚实的代理签名人生成验证有效的代理多签名,威胁到代理签名人和其他原始签名人的合法权益.提出4种改进的代理密钥生成算法来修正Lee的方案,可以有效抵抗恶意原始签名人的伪造攻击.
분석Lee제출적대리다첨명방안,급출일충위조공격,이용해공격,일개불성실적원시첨명인재불경과기타원시첨명인적동의하,가이성공위조대리첨명밀약,종이가이가모성실적대리첨명인생성험증유효적대리다첨명,위협도대리첨명인화기타원시첨명인적합법권익.제출4충개진적대리밀약생성산법래수정Lee적방안,가이유효저항악의원시첨명인적위조공격.
A multi-proxy signature scheme is proposed by Lee et al. However, their scheme is insecure. A forgery attack on their multi-proxy signature scheme is proposed in this paper. Using the forgery attack, a dishonest original signer can forgery a proxy signing key on behalf of all the original signers without their agreements and produce valid multi-proxy signatures, which does harm to the benefits of the proxy signer and other original signers. Four improved proxy key generation algorithms are also proposed to repair the scheme, which can resist effectively the forgery attack of original signers.