Secure Signature Protocol

Shundong Li,Daoshun Wang,Yiqi Dai

DOI: https://doi.org/10.4236/iim.2009.13026

2009-01-01

Abstract:This paper studies how to take advantage of other's computing ability to sign a message with one's private key without disclosing the private key.A protocol to this problem is presented, and it is proven, by well known simulation paradigm, that this protocol is private.

What problem does this paper attempt to address?

Inter-domain authentication scheme for Pervasive Computing Environments

YAO Lin,FAN Qingna,KONG Xiangwei

DOI: https://doi.org/10.3778/j.issn.1002-8331.2011.06.023

2011-01-01

Abstract:As a result of the high mobility of the pervasive computing,the principles communicating with each other usually locate at different domains.To secure the service access and communications,the principles should authenticate each other and establish a fresh session key.A novel inter-domain authentication and key establishment protocol is proposed.The proposed protocol reduces the burden of certificates management by adopting the biometric encryption.After inter-domain mutual authentication,the two principles build a new session key using the signcryption technique.The protocol can defend lots of attacks and its correctness is proven by the SVO logic.
An Efficient Delegation-Based Anonymous Authentication Protocol

Jianqing Fu,Jian Chen,Rong Fan,XiaoPing Chen,Lingdi Ping

DOI: https://doi.org/10.1109/wcse.2009.731

2009-01-01

Abstract:With the widespread use of mobile devices, authentication and privacy of identification become important issues. We analyzed the security flaws and shortcomings of a delegation-based authentication protocol which was proposed by Caimu Tang, et al., and provided an improved protocol. We use elliptic-curve cryptography and hash chain to ensure the safety of system in our scheme. The research results reveal that the improved protocol can not only corrects the security flaws but also improve the efficiency of key management and reduce the computational load.
��计算中基于可转换代理签密的可证安全的认证协议

Qi XIE,XiuYuan YU,WenHao LIU,DeRen CHEN,GuiLin WANG,JiYi WU

DOI: https://doi.org/10.1360/112011-915

2012-01-01

Scientia Sinica Informationis

Abstract:Mutual authentication between the user and the public cloud is essential requirement for the user to access the public cloud in cloud computing. In 2011, Juang et al. proposed a first authentication scheme based on proxy signature. The advantage of the scheme is that the user only needs to register on his home service cloud (HSC), and can pass through the authentication of the public cloud with the help of his HSC. However, their scheme has three weaknesses: 1) the users HSC needs to update the users public key in each session to protect the users privacy; 2) HSC may suffer from network jam when many users in the same HSC need to register on different public clouds simultaneously; and 3) a secret key should be shared between HSC and visiting cloud. To overcome these weaknesses, a provably secure convertible proxy signcryption for privacy preserving is proposed. Based on this scheme, a novel one-round authentication protocol is proposed, which the user only needs to register on his HSC, and can pass through the authentication of the visiting cloud without the help of his HSC. On the other hand, the proposed protocol can provide some nice properties, such as user privacy protection, non-repudiation, without updating the users public key, and secret key does not have to be shared between HSC and visiting cloud. In addition, the proposed scheme is provably secure in the random oracle model, and is more efficient than Juang et al.s scheme.
Provably secure authentication protocol based on convertible proxy signcryption in cloud computing

XIE Qi,WU JiYi,WANG GuiLin,CHEN DeRen,YU XiuYuan

2012-01-01

Abstract:Mutual authentication between the user and the public cloud is essential requirement for the user to access the public cloud in cloud computing.In 2011,Juang et al.proposed a first authentication scheme based on proxy signature.The advantage of the scheme is that the user only needs to register on his home service cloud(HSC),and can pass through the authentication of the public cloud with the help of his HSC.However, their scheme has three weaknesses:1)the user’s HSC needs to update the user’s public key in each session to protect the user’s privacy;2)HSC may suffer from network jam when many users in the same HSC need to register on different public clouds simultaneously;and 3)a secret key should be shared between HSC and visiting cloud.To overcome these weaknesses,a provably secure convertible proxy signcryption for privacy preserving is proposed.Based on this scheme,a novel one-round authentication protocol is proposed,which the user only needs to register on his HSC,and can pass through the authentication of the visiting cloud without the help of his HSC.On the other hand,the proposed protocol can provide some nice properties,such as user privacy protection, non-repudiation,without updating the user’s public key,and secret key does not have to be shared between HSC and visiting cloud.In addition,the proposed scheme is provably secure in the random oracle model,and is more efficient than Juang et al.’s scheme.
A method for obtaining digital signatures and public-key cryptosystems

R. L. Rivest,A. Shamir,L. Adleman

DOI: https://doi.org/10.1145/359340.359342

IF: 22.7

1978-02-01

Communications of the ACM

Abstract:An encryption method is presented with the novel property that publicly revealing an encryption key does not thereby reveal the corresponding decryption key. This has two important consequences: (1) Couriers or other secure means are not needed to transmit keys, since a message can be enciphered using an encryption key publicly revealed by the intented recipient. Only he can decipher the message, since only he knows the corresponding decryption key. (2) A message can be “signed” using a privately held decryption key. Anyone can verify this signature using the corresponding publicly revealed encryption key. Signatures cannot be forged, and a signer cannot later deny the validity of his signature. This has obvious applications in “electronic mail” and “electronic funds transfer” systems. A message is encrypted by representing it as a number M, raising M to a publicly specified power e, and then taking the remainder when the result is divided by the publicly specified product, n , of two large secret primer numbers p and q. Decryption is similar; only a different, secret, power d is used, where e * d ≡ 1(mod (p - 1) * (q - 1)). The security of the system rests in part on the difficulty of factoring the published divisor, n .

computer science, theory & methods, software engineering, hardware & architecture
A privacy-protecting proxy signature scheme and its application.

Jia-Zhu Dai,Xiao-Hu Yang,Jinxiang Dong

DOI: https://doi.org/10.1145/986537.986584

2004-01-01

Abstract:ABSTRACTProxy signatures are signature schemes that a signer (called original signer) delegates his signing capability to other people (called proxy signer), and the proxy signer creates signatures on behalf of the original signer. In application such as electronic voting and electronic commerce, the privacy may be concerned by the original signer. The original signer may hope that the proxy signers can sign on behalf of him without knowing the content of the signed message. Few efforts have been put on privacy protection of original signer in existed proxy signature schemes. In this paper, a privacy-protecting proxy signature scheme is proposed. In this scheme, the messages the original signer entrust to the proxy signer to sign on behalf of him are secret from the proxy signer during the generation of the proxy signature and from other people except the receiver designated by the original signer. Therefore, the privacy of the original signer is protected. The security of the proposed signature scheme is analyzed and its application to electronic voting is described.
On the Security of Public Key Protocols

D DOLEV,AC YAO

DOI: https://doi.org/10.1109/tit.1983.1056650

IF: 2.5

1983-01-01

IEEE Transactions on Information Theory

Abstract:Recently the use of public key encryption to provide secure network communication has received considerable attention. Such public key systems are usually effective against passive eavesdroppers, who merely tap the lines and try to decipher the message. It has been pointed out, however, that an improperly designed protocol could be vulnerable to an active saboteur, one who may impersonate another user or alter the message being transmitted. Several models are formulated in which the security of protocols can be discussed precisely. Algorithms and characterizations that can be used to determine protocol security in these models are given.
Practical Fair Anonymous Undeniable Signatures.

Song Han,Elizabeth Chang,Xiaotie Deng,Winson K. Y. Yeung,Li Gao

2004-01-01

Abstract:present a new model for undeniable signatures: fair-anonymous undeniable signatures. This protocol can not only preserve the privacy of the signer (i.e. anonymity) but also track the illegal utilization of the valid signatures. In addition, our model prevents the trusted centre from forging a valid signature for any signer.
Anonymous Signature Schemes

Guomin Yang,Duncan S. Wong,Xiaotie Deng,Huaxiong Wang

DOI: https://doi.org/10.1007/11745853_23

2006-01-01

Abstract:Digital signature is one of the most important primitives in public key cryptography. It provides authenticity, integrity and non- repudiation to many kinds of applications. On signer privacy however, it is generally unclear or suspicious of whether a signature scheme itself can guarantee the anonymity of the signer. In this paper, we give some armative answers to it. We formally define the signer anonymity for digital signature and propose some schemes of this type. We show that a signer anonymous signature scheme can be very useful by proposing a new anonymous key exchange protocol which allows a client Alice to establish a session key with a server Bob securely while keeping her iden- tity secret from eavesdroppers. In the protocol, the anonymity of Alice is already maintained when Alice sends her signature to Bob in clear, and no additional encapsulation or mechanism is needed for the signa- ture. We also propose a method of using anonymous signature to solve the collusion problem between organizers and reviewers of an anonymous paper review system.
A New Parallel Multi-Message Signature Scheme

李顺东,戴一奇

DOI: https://doi.org/10.3321/j.issn:1000-436x.2003.10.021

2003-01-01

Abstract:With available digital signature schemes, one can sign one or multi-message at same time. If persons more than one need to sign multi-message, the order signature method is chosen or a third party is needed to sign message as their agent. Sometimes, parallel multi-message signature without agent is needed but available signature schemes cant achieve this demand. A parallel signature scheme that can meet this requirement is proposed and its security is proved in this paper. The verification of the signature is also parallel.
Quantum Signature Protocol without the Trusted Third Party

Wen Xiao-jun,Liu Yun

DOI: https://doi.org/10.48550/arXiv.quant-ph/0509129

2006-12-11

Abstract:An authentic digital signature scheme based on the correlation of Greenberger-Horne-Zeilinger (GHZ) states was presented. In this scheme, by performing a local unitary operation on the third particles of each GHZ triplet, Alice can encode message M and get its signature S. Bob performs CNOT operation on the combined GHZ triplets can recovery the message M and directly authenticates Alice's signature S. Our scheme was designed to use quantum secret key to guaranteed unconditional security, as well as use quantum fingerprinting to avoid trick attacks and reduce communication complexity.

Quantum Physics
New Signature with Shared Verification Scheme

WANG Yong,ZHU Yan-qin

DOI: https://doi.org/10.1007/0-387-34805-0_23

2011-01-01

Abstract:This paper presents a signature with shared verification scheme based on verifiable multi-secret sharing.The scheme effecitively overcomes the deficiencies of the previous schemes in terms of security.In the process of signature verification,validation group can prevent some members providing the faulted information.This can make verification failure.Because the scheme uses verifiable multi-secret sharing,it can verify many signatures when it makes once multi-secret sharing.It has higher efficiency compared with the previous schemes.
A secure and efficient identity-based quantum signature scheme

Bai Liu,Pengda Zhu,Kuikui Guo

DOI: https://doi.org/10.1063/5.0212258

IF: 1.697

2024-06-01

AIP Advances

Abstract:In recent years, identity-based quantum signature protocols have received much attention due to their unique advantages. Based on Bell states, we propose an efficient identity-based quantum signature scheme. In our scheme, the signer’s private key is generated from their identity information. The signer uses the private key and secret parameters to generate a signature for the verifier. The verifier, who possesses the identity information of the signer, can authenticate the signature. Our proposed scheme ensures signature non-forgeability and non-repudiation. In addition, the protocol does not require the preparation of long-term quantum memory or the performance of quantum swap tests, making it more efficient than previous schemes.

materials science, multidisciplinary,physics, applied,nanoscience & nanotechnology
Experimental quantum secure network with digital signatures and encryption

Hua-Lei Yin,Yao Fu,Chen-Long Li,Chen-Xun Weng,Bing-Hong Li,Jie Gu,Yu-Shuo Lu,Shan Huang,Zeng-Bing Chen

DOI: https://doi.org/10.1093/nsr/nwac228

IF: 20.6

2022-10-22

National Science Review

Abstract:Abstract Cryptography promises four information security objectives, namely, confidentiality, integrity, authenticity, and non-repudiation, to support trillions of transactions annually in digital economy. Efficient digital signatures, ensuring integrity, authenticity, and non-repudiation of data with information-theoretical security are highly urgent and intractable open problems in cryptography. Here, we propose a high-efficiency quantum digital signature (QDS) protocol using asymmetric quantum keys acquired via secret sharing, one-time universal2 hashing, and one-time pad. We just need to use a 384-bit key to sign documents of up to 264 lengths with a security bound of 10−19. If one-megabit document is signed, the signature efficiency is improved by more than 108 times compared with previous QDS protocols. Furthermore, we build the first all-in-one quantum secure network integrating information-theoretically secure communication, digital signatures, secret sharing, and conference key agreement and experimentally demonstrate this signature efficiency advantage. Our work completes the cryptography toolbox of the four information security objectives.

multidisciplinary sciences
Designing High-Performance Identity-Based Quantum Signature Protocol With Strong Security

Sunil Prajapat,Pankaj Kumar,Sandeep Kumar,Ashok Kumar Das,Sachin Shetty,M. Shamim Hossain

DOI: https://doi.org/10.1109/access.2024.3355196

IF: 3.9

2024-02-03

IEEE Access

Abstract:Due to the rapid advancement of quantum computers, there has been a furious race for quantum technologies in academia and industry. Quantum cryptography is an important tool for achieving security services during quantum communication. Designated verifier signature, a variant of quantum cryptography, is very useful in applications like the Internet of Things (IoT) and auctions. An identity-based quantum-designated verifier signature (QDVS) scheme is suggested in this work. Our protocol features security attributes like eavesdropping, non-repudiation, designated verification, and hiding sources attacks. Additionally, it is protected from attacks on forgery, inter-resending, and impersonation. The proposed scheme benefits from the traditional designated verifier signature schemes. In the proposed scheme, the signer encrypts a message with his or her private key, and the designated verifier validates the accompanying QDVS using the signer's public key, which is the signer's name or email address, which makes the quantum signature system's key management simpler. It uses an entangled state while signing and verifying the signature; however, the verifier is not required to compare quantum states. A detailed comparison analysis with other similar schemes provides more security for the proposed scheme. Furthermore, the proposed scheme's effectiveness and feasibility are validated using quantum simulations.

computer science, information systems,telecommunications,engineering, electrical & electronic
On Signatures and Authentication

Shafi Goldwasser,Silvio Micali,Andrew Chi-chih Yao

DOI: https://doi.org/10.1007/978-1-4757-0602-4_20

1982-01-01

Abstract:The design of cryptographic protocols using trapdoor and one-way functions has received considerable attention in the past few years [1–8]. More recently, attention has been paid to provide rigorous correctness proofs based on simple mathematical assumptions, for example, in coin flipping (Blum [1]), mental poker (Goldwasser and Micali [4]). It is perhaps reasonable to speculate at this time that all cryptographic protocols can eventually be designed to be provably secure under simple assumptions, such as factoring large numbers or inverting RSA functions are computationally intractable in the appropriate sense.
Dynamic Authentication Protocol Using Multiple Signatures

Soumit Chowdhury,Ritesh Mukherjee,Nabin Ghoshal

DOI: https://doi.org/10.1007/s11277-017-4066-x

IF: 2.017

2017-03-11

Wireless Personal Communications

Abstract:The work highlights a secure and trusted data transmission protocol focusing on dynamic cum multi-phase authentication scenarios suitable for defense sector applications under wireless environments. Initially the user communicates a proprietary logo image chosen dynamically and marked visibly on a selected region of the authentic digital document. Receiver identifies two secret codes against this logo and its respective region number after sensing the logo from the document. In the second phase invisible fabrication of multiple ownership digitized signature shares on the document is governed by the generated secret data which dynamically decides the bit fabrication sequences, locations of fabrications and the proper ordering of the fabricated shares. This data is actually produced through the separate encryption of the user secret key with those tracked hidden codes and the underneath code of the acknowledgment message at the client side. Similarly the same data casting places and the exact share orientations are dynamically computed by the receiver using all those unexposed information for detecting the fabricated shares from the authenticated document. Finally the copyright signatures are constructed by merging those detected shares with their respective private shares only by the receiver. Random threshold reference point based distinctly separate bit coding policy on each transformed coefficients of the sub image block pixel bytes ensuring high security and robustness against attacks under wireless platform. Significantly the experimental results have fully confirmed the strong excellence and superiority of this scheme over existing approaches in various aspects with better handling of authentication, confidentiality, and non-repudiation issues.

telecommunications
Secure and Practical Multiparty Quantum Digital Signatures.

Chen-Xun Weng,Yu-Shuo Lu,Rui-Qi Gao,Yuan-Mei Xie,Jie Gu,Chen-Long Li,Bing-Hong Li,Hua-Lei Yin,Zeng-Bing Chen

DOI: https://doi.org/10.1364/oe.433656

IF: 3.8

2021-01-01

Optics Express

Abstract:Quantum digital signatures (QDSs) promise information-theoretic security against repudiation and forgery of messages. Compared with currently existing three-party QDS protocols, multiparty protocols have unique advantages in the practical case of more than two receivers when sending a mass message. However, complex security analysis, numerous quantum channels and low data utilization efficiency make it intractable to expand three-party to multiparty scenario. Here, based on six-state non-orthogonal encoding protocol, we propose an effective multiparty QDS framework to overcome these difficulties. The number of quantum channels in our protocol only linearly depends on the number of users. The post-matching method is introduced to enhance data utilization efficiency and make it linearly scale with the probability of detection events even for five-party scenario. Our work compensates for the absence of practical multiparty protocols, which paves the way for future QDS networks.
New Efficient Certificateless Blind Signature Scheme

Haibin Chen,Lei Zhang,Junyuan Xie,Chongjun Wang

DOI: https://doi.org/10.1109/TrustCom.2016.82

2016-01-01

Abstract:As a new paradigm, certificateless public key cryptography was introduced by AI-Riyami and Paterson. It resolves the high cost of certificate in the traditional public key cryptography and the inherent key escrow problem in the identity-based cryptography. Due to the advantages of certificateless public key cryptography, a new efficient certificateless blind signature scheme from bilinear maps is proposed, which requires less computational effort by comparing with previous constructions. The number of pairing operations in the signing and verification phase of our scheme is only one. This is probably the best to achieve in pairing based signature schemes. Furthermore, we show that the proposed scheme is provably secure in the random oracle model. The security of our scheme is proven based on the hardness of q-Strong Diffie-Hellman problem and the Inverse Computational Diffie-Hellman problem.
Security Analysis of an Identity-Based Signature from Factorization Problem

Ganglin Zhang,Yongjian Liao,Yu Fan,Yikuan Liang

DOI: https://doi.org/10.1109/access.2020.2964040

IF: 3.9

2020-01-01

IEEE Access

Abstract:Many sensitive data are generated by resource-limitation devices in the Vehicular ad hoc network (VANET). When these data are divulged, people 's life and property will be threatened. To solve these problems, Wei et al. proposed a lightweight privacy-preserving protocol based on RSA assumption for VANET and they claimed that their protocol was secure and low overhead. In this paper, first of all, we show that the basic signature scheme to be used in Wei et al.'s protocol is not secure, i.e., the user's private key will be revealed from the pairs of message-signatures, which causes the protocol to be insecure. We also show that our security analysis is feasible and effective in practice from the theory and experiments. Then we construct a new identity-based signature scheme based RSA assumption and prove it is existentially unforgeable under the chosen message attack without random oracle. Finally, we update the Wei et al.'s protocol and do some experiments to evaluate the efficiency of our scheme in the updated protocol.

Secure Signature Protocol

Inter-domain authentication scheme for Pervasive Computing Environments

An Efficient Delegation-Based Anonymous Authentication Protocol

���计算中基于可转换代理签密的可证安全的认证协议

Provably secure authentication protocol based on convertible proxy signcryption in cloud computing

A method for obtaining digital signatures and public-key cryptosystems

A privacy-protecting proxy signature scheme and its application.

On the Security of Public Key Protocols

Practical Fair Anonymous Undeniable Signatures.

Anonymous Signature Schemes

A New Parallel Multi-Message Signature Scheme

Quantum Signature Protocol without the Trusted Third Party

New Signature with Shared Verification Scheme

A secure and efficient identity-based quantum signature scheme

Experimental quantum secure network with digital signatures and encryption

Designing High-Performance Identity-Based Quantum Signature Protocol With Strong Security

On Signatures and Authentication

Dynamic Authentication Protocol Using Multiple Signatures

Secure and Practical Multiparty Quantum Digital Signatures.

New Efficient Certificateless Blind Signature Scheme

Security Analysis of an Identity-Based Signature from Factorization Problem

��计算中基于可转换代理签密的可证安全的认证协议