基于IC协议的分块加密方案及其应用
|
摘要
快递面单泄密问题在给个人带来安全隐患的同时,也制约着快递企业的快速发展。针对快递面单隐私保护进行了研究。将基于身份的加密体制(BF-IBE)、权限设计思想及二维码技术相结合,设计了一种分块加密方案,采用一种新的用户私钥分发协议(IC协议)来解决密钥管理问题。将分块加密方案应用于快递隐私保护领域,设计了新型隐私面单与快递业务流程。结果分析表明,分块加密方案所采用的IC协议无须求逆运算,双线性对运算有效降低,便于密钥管理。在加/解密效率上分块加密方案与BF-IBE相当,安全性基于椭圆曲线上的离散对数问题,应用于快递领域能有效保护用户隐私,可推广至其他有分块加密需求的领域。
The problem of leaking through express sheet brings security risks to individuals,but also restricts the rapid development of express enterprises. This paper studied the privacy protection of express sheet. By combining the identity based encryption system(BF-IBE),the idea of authority design and the two-dimensional code technology,this paper designed a block encryption scheme. The scheme used a new private key distribution protocol(IC protocol) to solve the key management problem. This paper applied the block encryption scheme to the domain of express privacy protection,and designed a new privacy express sheet and express business process. The results show that the IC protocol uses in the block encryption scheme needs no inverse operation,and the bilinear pairings can be effectively reduced and the key management can be carried out easily. The encryption and decryption efficiency of the block encryption scheme is similar to that of BF-IBE. Its security is based on the discrete logarithm problem on elliptic curves. It can be applied to express field,which can effectively protect the user's privacy. It is also suitable for other areas with block encryption requirements.
The problem of leaking through express sheet brings security risks to individuals,but also restricts the rapid development of express enterprises. This paper studied the privacy protection of express sheet. By combining the identity based encryption system(BF-IBE),the idea of authority design and the two-dimensional code technology,this paper designed a block encryption scheme. The scheme used a new private key distribution protocol(IC protocol) to solve the key management problem. This paper applied the block encryption scheme to the domain of express privacy protection,and designed a new privacy express sheet and express business process. The results show that the IC protocol uses in the block encryption scheme needs no inverse operation,and the bilinear pairings can be effectively reduced and the key management can be carried out easily. The encryption and decryption efficiency of the block encryption scheme is similar to that of BF-IBE. Its security is based on the discrete logarithm problem on elliptic curves. It can be applied to express field,which can effectively protect the user's privacy. It is also suitable for other areas with block encryption requirements.
引文
[1]廖欣,周翼.论快递服务与网购个人信息保护[J].物流科技,2014,37(1):114-115.(Liao Xin,Zhou Yi.The research on the courier service and online shopping personal information protection[J].Logistics Sci-Tech,2014,37(1):114-115.)
[2]严璞.基于手机二维码的物流管理信息系统设计与实现[D].武汉:华中科技大学,2011.(Yan Pu.Design and implementation of a logistics management system based on 2D barcode[D].Wuhan:Huazhong University of Science and Technology,2011.)
[3]Shamir A.Identity-based cryptosystems and signature schemes[C]//Proc of Crypto.Berlin:Springer-Verlag,1984:47-53.
[4]Boneh D,Franklin M.Identity based encryption from the Weil pairing[C]//Proc of the 21st Annual International Cryptology Conference on Advances in Cryptology.London:Springer-Verlag,2001:213-229.
[5]曾梦岐,卿昱,谭平璋,等.基于身份的加密体制研究综述[J].计算机应用研究,2010,27(1):27-31.(Zeng Mengqi,Qing Yu,Tan Pingzhang,et al.Survey of research on identity-based encryption[J].Application Research of Computers,2010,27(1):27-31.)
[6]李玉欢.基于身份加密体制密钥管理研究与应用[D].成都:电子科技大学,2016.(Li Yuhuan.Key management research and application in identity-based encryption system[D].Chengdu:University of Electronic Science and Technology of China,2016.)
[7]封化民,孙轶茹,孙莹.基于身份认证加密的私钥共享方案及其应用[J].计算机应用研究,2014,31(5):1507-1510.(Feng Huamin,Sun Yiru,Sun Ying.Authenticated identity-based private key sharing scheme and its application[J].Application Research of Computers,2014,31(5):1507-1510.)
[8]慈云飞,李凤华,史国振,等.基于双线性配对构造的身份加密体制[J].北京电子科技学院学报,2015,23(2):34-39.(Ci Yunfei,Li Fenghua,Shi Guozhen,et al.Identity-based encryption using bilinear pairing[J].Journal of Beijing Electronic Science and Technology Institute,2015,23(2):34-39.)
[9]侍伟敏.基于m IBE的密钥托管和身份撤销方案[J].华中科技大学学报:自然科学版,2011,39(5):76-78.(Shi Weimin.Key-escrow and identity-revocation scheme based m IBE[J].Journal of Huazhong University of Science&Technology:Natural Science,2011,39(5):76-78.)
[10]Oh J H,Lee K K,Moon S J.How to solve key escrow and identity revocation in identity-based encryption schemes[C]//Proc of International Conference on Information Systems Security.Berlin:Springer-Verlag,2005:290-303.
[11]王小峰,陈培鑫,周寰,等.一种可信安全的层次式基于身份加密系统[J].电子学报,2016,44(7):1521-1529.(Wang Xiaofeng,Chen Peixin,Zhou Huan,et al.A trustworthy and secure hierarchical identity-based encryption system[J].Acta Electronica Sinica,2016,44(7):1521-1529.)
[12]侍伟敏.基于AIC的IBE私钥分发协议[J].北京邮电大学学报,2008,31(4):74-76.(Shi Weimin.IBE private key issuing protocol based on attestation identity certificate[J].Journal of Beijing University of Posts and Telecommunications,2008,31(4):74-76.)
[13]方文和,李国和,吴卫江,等.面向Android的RSA算法优化与二维码加密防伪系统设计[J].计算机科学,2017,44(1):176-181.(Fang Wenhe,Li Guohe,Wu Weijiang,et al.Optimization of RSA encryption algorithm for Android mobile phone and design of QRcode encryption security system[J].Computer Science,2017,44(1):176-181.)
[14]杜晨杰,张少中,姚英彪.一种基于加密二维码标签的新型快递管理系统[J].浙江万里学院学报,2017,30(3):19-25.(Du Chenjie,Zhang Shaozhong,Yao Yingbiao.A new express management system based on encrypted QR code[J].Journal of Zhejiang Wanli University,2017,30(3):19-25.)
[15]韦茜,王晨,李星毅.基于RSA算法的快递信息隐私保护应用[J].电子技术应用,2014,40(7):58-60.(Wei Qian,Wang Chen,Li Xingyi.Express information privacy protection application based on RSA[J].Application of Electronic Technique,2014,40(7):58-60.)
[16]周春樵,朱思征,王山山,等.快递信息管理系统中隐私保护研究[J].物流工程与管理,2015,37(12):30-32.(Zhou Chunqiao,Zhu Sizheng,Wang Shanshan,et al.Research on privacy protection in express information management system[J].Logistics Engineering and Management,2015,37(12):30-32.)
[17]张新文,李华康,杨一涛,等.基于二维码技术的个人信息隐私保护物流系统[J].计算机应用研究,2016,33(11):3455-3459.(Zhang Xinwen,Li Huakang,Yang Yitao,et al.Logistic information privacy protection system based on encrypted QR code[J].Application Research of Computers,2016,33(11):3455-3459.)
[18]胡卫,吴邱涵,顾晨阳.基于二维码的物流业个人信息隐私保护方案设计[J].通信技术,2017,50(9):2074-2079.(Hu Wei,Wu Qiuhan,Gu Chenyang.Scheme design of logistic personal information privacy protection based on QR code[J].Communications Technology,2017,50(9):2074-2079.)
[2]严璞.基于手机二维码的物流管理信息系统设计与实现[D].武汉:华中科技大学,2011.(Yan Pu.Design and implementation of a logistics management system based on 2D barcode[D].Wuhan:Huazhong University of Science and Technology,2011.)
[3]Shamir A.Identity-based cryptosystems and signature schemes[C]//Proc of Crypto.Berlin:Springer-Verlag,1984:47-53.
[4]Boneh D,Franklin M.Identity based encryption from the Weil pairing[C]//Proc of the 21st Annual International Cryptology Conference on Advances in Cryptology.London:Springer-Verlag,2001:213-229.
[5]曾梦岐,卿昱,谭平璋,等.基于身份的加密体制研究综述[J].计算机应用研究,2010,27(1):27-31.(Zeng Mengqi,Qing Yu,Tan Pingzhang,et al.Survey of research on identity-based encryption[J].Application Research of Computers,2010,27(1):27-31.)
[6]李玉欢.基于身份加密体制密钥管理研究与应用[D].成都:电子科技大学,2016.(Li Yuhuan.Key management research and application in identity-based encryption system[D].Chengdu:University of Electronic Science and Technology of China,2016.)
[7]封化民,孙轶茹,孙莹.基于身份认证加密的私钥共享方案及其应用[J].计算机应用研究,2014,31(5):1507-1510.(Feng Huamin,Sun Yiru,Sun Ying.Authenticated identity-based private key sharing scheme and its application[J].Application Research of Computers,2014,31(5):1507-1510.)
[8]慈云飞,李凤华,史国振,等.基于双线性配对构造的身份加密体制[J].北京电子科技学院学报,2015,23(2):34-39.(Ci Yunfei,Li Fenghua,Shi Guozhen,et al.Identity-based encryption using bilinear pairing[J].Journal of Beijing Electronic Science and Technology Institute,2015,23(2):34-39.)
[9]侍伟敏.基于m IBE的密钥托管和身份撤销方案[J].华中科技大学学报:自然科学版,2011,39(5):76-78.(Shi Weimin.Key-escrow and identity-revocation scheme based m IBE[J].Journal of Huazhong University of Science&Technology:Natural Science,2011,39(5):76-78.)
[10]Oh J H,Lee K K,Moon S J.How to solve key escrow and identity revocation in identity-based encryption schemes[C]//Proc of International Conference on Information Systems Security.Berlin:Springer-Verlag,2005:290-303.
[11]王小峰,陈培鑫,周寰,等.一种可信安全的层次式基于身份加密系统[J].电子学报,2016,44(7):1521-1529.(Wang Xiaofeng,Chen Peixin,Zhou Huan,et al.A trustworthy and secure hierarchical identity-based encryption system[J].Acta Electronica Sinica,2016,44(7):1521-1529.)
[12]侍伟敏.基于AIC的IBE私钥分发协议[J].北京邮电大学学报,2008,31(4):74-76.(Shi Weimin.IBE private key issuing protocol based on attestation identity certificate[J].Journal of Beijing University of Posts and Telecommunications,2008,31(4):74-76.)
[13]方文和,李国和,吴卫江,等.面向Android的RSA算法优化与二维码加密防伪系统设计[J].计算机科学,2017,44(1):176-181.(Fang Wenhe,Li Guohe,Wu Weijiang,et al.Optimization of RSA encryption algorithm for Android mobile phone and design of QRcode encryption security system[J].Computer Science,2017,44(1):176-181.)
[14]杜晨杰,张少中,姚英彪.一种基于加密二维码标签的新型快递管理系统[J].浙江万里学院学报,2017,30(3):19-25.(Du Chenjie,Zhang Shaozhong,Yao Yingbiao.A new express management system based on encrypted QR code[J].Journal of Zhejiang Wanli University,2017,30(3):19-25.)
[15]韦茜,王晨,李星毅.基于RSA算法的快递信息隐私保护应用[J].电子技术应用,2014,40(7):58-60.(Wei Qian,Wang Chen,Li Xingyi.Express information privacy protection application based on RSA[J].Application of Electronic Technique,2014,40(7):58-60.)
[16]周春樵,朱思征,王山山,等.快递信息管理系统中隐私保护研究[J].物流工程与管理,2015,37(12):30-32.(Zhou Chunqiao,Zhu Sizheng,Wang Shanshan,et al.Research on privacy protection in express information management system[J].Logistics Engineering and Management,2015,37(12):30-32.)
[17]张新文,李华康,杨一涛,等.基于二维码技术的个人信息隐私保护物流系统[J].计算机应用研究,2016,33(11):3455-3459.(Zhang Xinwen,Li Huakang,Yang Yitao,et al.Logistic information privacy protection system based on encrypted QR code[J].Application Research of Computers,2016,33(11):3455-3459.)
[18]胡卫,吴邱涵,顾晨阳.基于二维码的物流业个人信息隐私保护方案设计[J].通信技术,2017,50(9):2074-2079.(Hu Wei,Wu Qiuhan,Gu Chenyang.Scheme design of logistic personal information privacy protection based on QR code[J].Communications Technology,2017,50(9):2074-2079.)