臺灣博碩士論文加值系統

藉由通訊技術，人們可簡單地相互通訊。但在享受便利的同時，如何達到安全的通訊則成為一個重要的議題。因此，許多安全協定被提出以保護通訊內容。本研究以植基於身份辨別號的安全協定為研究重點。以身份辨別號為基礎的安全協定將使用者名稱或使用者公開資訊做為該使用者的公開金鑰。這特性使得這些協定與其他植基於傳統公開金鑰系統的協定大不相同。在這些以辨別號為基礎的安全協定中，在執行協定時不用去驗證公開金鑰的憑證。如此一來，這些協定便不需公開金鑰憑證中心去核發憑證，且可捨去驗證憑證的負擔。
在論文中，我們首先介紹Li與Khan在2012年所提出的簽章加密協定，該協定導入生物特徵並以辨別號為基礎，我們指出其協定之缺陷並提出改進方法，使得在執行協定時不需要輸入對方的生物特徵以確保個人隱私。接下來，我們介紹Li等人於同年所發表的以身份辨別號為基礎之部分盲簽章協定及電子現金(e-cash)應用，並以詳細的分析闡述其缺陷。

Communication technologies enable people communicate with each other easily. Meanwhile, how to ensure secure communication becomes an important issue. Thus, many security protocols are proposed. These security protocols can be applied to protecting transmitted information. This study focuses on identity-based (ID-based) security protocols. In ID-based security protocols, a user’s identity or public information is the user’s public key. This property makes them differ from protocols in traditional public-key cryptosystems. In these ID-based security protocols, no certificate needs to be verified such that no certificate authority needs to issue a certificate and the overhead of verifying a certificate is eliminated.
In this thesis, we first introduce Li and Khan’s ID-based biometric signcryption scheme proposed in 2012. After analyzing their scheme, the found drawback is given, and we also propose an enhancement such that no biometric data is transmitted to others for personal privacy. Then, we review Li et al.’s ID-based partially blind signature with its corresponding application for e-cash and indicate the security flaws that Li et al.’s scheme suffers from.

中文摘要 I
Abstract II
Table of content III
Chapter 1 Introduction 1
1.1 Motivation and background 1
1.2 Thesis organization 4
Chapter 2 Preliminaries 5
2.1 Bilinear pairings and the related hard problems 5
2.1.1 Cyclic bilinear pairings with additive groups 5
2.1.2 Cyclic bilinear pairings with multiplicative groups 6
2.2 Generating the key value from biometrics 6
Chapter 3 Biometric identity-based signcryption 8
3.1 The formal model of identity-based biometric signcryption 8
3.1.1 A generic IBBSC scheme 8
3.1.2 Security notions 9
3.2 Review of Li and Khan’s identity-based biometric signcryption scheme 11
3.3 Our identity-based biometric signcryption scheme 12
3.3.1 The proposed scheme 12
3.3.2 Security analysis 14
Chapter 4 Analyses of Li et al.’s IBPBS scheme 17
4.1 Related works 17
4.1.1 Paterson and Schuldt’s IBS scheme 17
4.1.2 Review of Li et al.’s IBPBS scheme 18
4.1.3 The corresponding application for e-cash of Li et al.’s IBPBS scheme 19
4.2 Security flaws of Li et al.’s e-cash system 20
4.3 Further discussions 22
Chapter 5 Conclusions 23
Bibliography 24

[1] A. Shamir, “Identity-based cryptosystem and signature scheme,” Advance in Cryptology-CRYPTO’84, LNCS, vol. 196, Springer-Verlag, Berlin, pp. 47-53, 1985.
[2] M. Bellare, C. Namprempre, and G. Neven, “Security proofs for identity-based identification and signature schemes,” Advances in Cryptology-EUROCRYPT’04, LNCS, vol. 3027, Springer-Verlag, Berlin, pp. 268-286, 2004.
[3] D. Boneh and M. Franklin, “Identity-based encryption from the Weil parings,” Advances in Cryptology-CRYPTO’01, LNCS, vol. 2139, Springer-Verlag, Berlin, pp. 213-229, 2001.
[4] K. G. Paterson, “ID-based signatures from pairings on elliptic curves,” Electronics Letters, vol. 38, no. 18, pp.1025-1026, 2002.
[5] Y. Zheng, “Digital signcryption or how to achieve cost (signature & encryption) ≪ cost (signature) + cost (encryption),” Advances in Cryptology-CRYPTO’97, LNCS, vol.1294, Springer-Verlag, Berlin, pp. 165-179, 1997.
[6] J. Malone-Lee, “Identity based signcryption,” Cryptology ePrint Archive Report2002/098, 2002.
[7] B. Libert and J. J. Quisquator, “A new identity based signcryption scheme from pairings,” Proceedings of 2003 IEEE information theory workshop, Paris, France, pp. 155-158, 2003.
[8] L. Chen and J. Malone-Lee, “Improve identity-based signcryption,” Public Key Cryptography-PKC 2005, LNCS, vol. 3386, Springer-Verlag, Berlin, pp. 362-379, 2005.
[9] P. S. L. M. Barreto, B. Libert, N. McCullagh, and J. J. Quisquater,“ Efficient and provably-secure identity based signatures and signcryption from bilinear map,” Advance in Cryptology-ASIACRYPT 2005, LNCS, vol. 3788, Springer-Verlag, Berlin, pp. 515-532, 2005.
[10] D. Chaum, “Blind signatures for untraceable payments,” Advances in Cryptology–CRYPTO’82, Plenum, New York, LNCS, Springer-Verlag, Berlin, pp. 199-203, 1983.
[11] M. Abe and E. Fujisaki, “How to date blind signatures,” Advances in Cryptology–ASIACRYPT 1996, LNCS, vol. 1163, Springer-Verlag, pp. 244-251, 1996.
[12] Y. Dodis, L. Reyzin, and A. Smith, “Fuzzy extractor: how to generate strong keys from biometrics and other noisy data,” Advances in Cryptology- EUROCRYPT’04, LNCS, vol. 3027, Springer-Verlag, Berlin, pp. 523-540, 2004.
[13] R. Alvarez Marino, F. Hernandez Alvarez, and L. Hernandez Encinas,“ A crypto-biometric scheme based on iris-templates with fuzzy extractors,” Information Sciences, vol. 195, pp. 91-102, 2012.
[14] F. Li and M. K. Khan, “A biometric identity-based signcryption scheme,” Future Generation Computer Systems, vol. 28, pp. 306-310, 2012.
[15] K. G. Paterson and J. C. N. Schuldt, “Efficient identity-based signatures secure in the standard model,” Information Security and Privacy-ACISP 2006, LNCS, vol. 4058, Springer-Verlag, pp. 207-222, 2006.
[16] F. Li, M. Zhang, and T. Takagi, “Identity-based partially blind signature in the standard model for electronic cash,” Mathematical and Computer Modelling, vol. 58, pp.196-203, 2012.
[17] A. Burnett, F. Byrne, T. Dowling, and A. Duffy,“ A biometric identity based signature scheme,” International Journal of Network Security, vol. 5, no. 3, pp. 317-326, 2007.