CAJ | 학술논문

通过对魏俊懿等人提出的一种前向安全的无证书代理盲签名方案进行安全性分析，发现该方案不能抵抗原始签名人的伪造攻击、不具有盲性。针对上述问题，提出一种改进的方案。通过对代理密钥生成过程以及盲签名过程的改进，克服了原方案存在的安全缺陷。利用将单向散列链嵌入签名的方法，保证了改进的方案具有后向安全性。而且，密钥生成中心与用户之间不需要建立可信的安全通道，节省了额外的开销。安全分析表明，改进的方案满足前向安全无证书代理盲签名方案的安全要求。
통과대위준의등인제출적일충전향안전적무증서대리맹첨명방안진행안전성분석，발현해방안불능저항원시첨명인적위조공격、불구유맹성。침대상술문제，제출일충개진적방안。통과대대리밀약생성과정이급맹첨명과정적개진，극복료원방안존재적안전결함。이용장단향산렬련감입첨명적방법，보증료개진적방안구유후향안전성。이차，밀약생성중심여용호지간불수요건립가신적안전통도，절성료액외적개소。안전분석표명，개진적방안만족전향안전무증서대리맹첨명방안적안전요구。
Through the security analysis of a forward secure certificateless proxy blind signature scheme proposed by Wei Junyi et al., it is found that the scheme does not resist the original signer’s forgery attack and does not satisfy the blindness. To address the above problems, an improved scheme is presented. The improved scheme overcomes the security drawbacks existing in the original scheme by improving the proxy key generation process and the blind signature process. The improved scheme also satisfies the backward security by embedding the one-way hash chain in the signature. Furthermore, there is no need to set up a confidential channel between key generation center and users, which reduces extra expense. The security analysis shows that the improved scheme meets the security requirements of a forward secure certificateless proxy blind signature scheme.