一个高效的有向传递签名方案

传递签名是由Micali和Rivest在2002年首先提出的,主要用于对二元传递关系进行签名.已有的传递签名方案都是无向的,只适用于对等价关系签名,提出有向传递签名方案是个留待解决的公开问题.该文提出一个高效的全序有向传递签名方案,并证明该方案在选择明文攻击下是安全的.在方案中,签名的β_uv部分被限定在0和q/2之间,以防止敌手由(u,v)的签名伪造(v,u)的签名,从而保证签名的有向性.将该方案与无向传递签名方案结合,提出一个可对任何有向二元传递关系进行签名的方案.

Efficient Directed Transitive Signature Scheme

Transitive signature was first introduced by Micali and Rivest in 2002 to meet the need of certain applications like signing a chain of command,a chain of certificate or transitive binary relations.Unfortunately,all the transitive signature schemes available are undirected ones and can only be used in the case of equivalence relation.The problem of finding a directed transitive signature scheme remains a very interesting open problem.In this paper,an efficient total ordering directed transitive signature scheme is proposed and its security against adaptive chosen-message attack is proved.In the proposed scheme,the part β_uv of signature is limited from 0 to q/2 to prevent an adversary from forging (v,u)'s signature with the knowledge of (u,v)'s signature,and thus achieve the directed property.A solution for signing any directed transitive binary relation is presented by combining the proposed scheme with the undirected transitive signature schemes available.