一种基于Harn数字签名的双向认证访问控制方案

针对信息保护系统，该文在于Harn数字签名方案和零知识证明构造了一种双向认证访问控制方案。在该方案中，用户与系统不必暴露秘密信息就可以进行双向认证，并且用户和系统的共享密钥可用于认证有 访问保密信息体的请求的合法权限。因此，该方案与已有该问控制方案相比要更加安全。该方案能够执行像改变存取权限和插入／删除用户或信息体这样的该访问操作，而不影响任何用户的保密密钥，不需重建信息保护系统。因此，该方案动态特性好。基于Harn数字签名方案和零知识证明给出的这一认证访问控制方案的计算安全性不低于求解“离散对数问题”的计算复杂性。

An Double-Way Authentication Access Control Scheme Based on Harn's Digital Signature

For information protection system, based on Harn's digital signature scheme and zero-knowledge proof, this paper presents a double-way authentication access control scheme. The scheme is safer than previously proposed schemes. In the scheme, double-way authentication may be done between a user and the system without exposing their secret information, and their sharing secret is used for authenticating the requesting user not to illegitimatimately access the protected information-body. The scheme can perform the access operation in dynamic environments, such as change access privileges and insert /delete users or information-bodies without implicating any user's secret key, and need not restructure the information protection system. Thus, the scheme's dynamic feature is perfect. The proposed double-way authentication access control scheme's computation security, based upon Harn's digital signature scheme and Zero-knowledge proof, does not lower than the computation complexity of solving “Discrete Logarithm Problem”.