Ad hoc网络特性要求所采用的切换方案必须是轻量的。将中国剩余定理和分簇的思想相结合,为Ad hoc网络提出了一种新的门限签名方案,在此基础上,提出一种轻量级分簇切换方案。通过分簇的门限签名保证了簇对话密钥的真实性,设计了在簇内和簇间两种情况下的切换操作流程,实现了快速安全的切换。该方案能够灵活适应Ad hoc网络动态拓扑性,适用于各种规模的网络。数学证明和安全性分析表明,该方案具有很高的安全性,并具有抗共谋攻击的能力。
选取扩展认证-安全传输层(EAP-TLS,Extensible Authentication Protocol-transport Layer Security)协议与直接匿名认证(DAA,Direct Anonymous Attestation)结合,简化了EAP-TLS中用户与服务器间相互证书的交换和认证,去掉冗余步骤,合并EAP-TLS中握手过程和DAA中匿名认证过程。将可信平台模块(TPM,Trusted Platform Module)引入无线局域网(WLAN,Wireless Local Area Networks),实现用户身份的匿名认证,减轻了EAP-TLS协议证书管理压力,不存在效率瓶颈,安全程度比EAP-TLS有所提高,能有效抵抗重放攻击、中间人攻击、拒绝服务(DoS,Denial of Services)攻击等安全威胁。
To support withdrawing and storing money from all levels of the bank for the customers in the real world, in this paper, we propose a proxy blind signature scheme and an off-line e-cash scheme based on the new proxy blind signature scheme. The proposed proxy blind signature is proven secure in the random oracle model under chosen-target computational Diffie-Hellman assumptions, and the e-cash scheme can satisfy the security requirements of unforgeability, anonymity, and traceability.
