The proposal of registered attribute-based signature(registered ABS) recently eliminates the long-standing key-escrow problem that has plagued classical attribute-based signature(ABS) for a long time. It allows users to generate public and secret key pairs themselves and register their public key and attribute with a key curator. The key curator is fully transparent and retains no secrets. Due to the introduction of public user registration, unlike classical ABS where only attribute authorities are aware of user’s attribute information, in registered ABS, all other users in the system can directly view a user’s attributes during registration phase. This is not conducive to the deployment of the scheme in scenarios that pursue user privacy. In this paper, we propose a new model of registered ABS that addresses the key-escrow problem while preserving users’ attribute privacy. We have provided a complete security definition of our registered ABS and proposed a detailed construction framework. Although our scheme necessitates a trusted authority, it ensures that adversaries cannot forge user signatures even if the authority is compromised.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Registered Attribute-Based Signature with Attribute Privacy

  • Liuyu Yang,
  • Xinxuan Zhang,
  • Yi Deng,
  • Xudong Zhu,
  • Zhuo Wu,
  • Zhongliang Zhang

摘要

The proposal of registered attribute-based signature(registered ABS) recently eliminates the long-standing key-escrow problem that has plagued classical attribute-based signature(ABS) for a long time. It allows users to generate public and secret key pairs themselves and register their public key and attribute with a key curator. The key curator is fully transparent and retains no secrets. Due to the introduction of public user registration, unlike classical ABS where only attribute authorities are aware of user’s attribute information, in registered ABS, all other users in the system can directly view a user’s attributes during registration phase. This is not conducive to the deployment of the scheme in scenarios that pursue user privacy. In this paper, we propose a new model of registered ABS that addresses the key-escrow problem while preserving users’ attribute privacy. We have provided a complete security definition of our registered ABS and proposed a detailed construction framework. Although our scheme necessitates a trusted authority, it ensures that adversaries cannot forge user signatures even if the authority is compromised.