Wang Lin, Peng Changgen, Tan Weijie
State Key Laboratory of Public Big Data, College of Computer Science and Technology, Guizhou University, Guiyang 550025, China.
Key Laboratory of Advanced Manufacturing Technology, Ministry of Education, Guizhou University, Guiyang 550025, China.
Entropy (Basel). 2023 Sep 14;25(9):1334. doi: 10.3390/e25091334.
Blockchain integrates peer-to-peer networks, distributed consensus, smart contracts, cryptography, etc. It has the unique advantages of weak centralization, anti-tampering, traceability, openness, transparency, etc., and is widely used in various fields, e.g., finance and healthcare. However, due to its open and transparent nature, attackers can analyze the ledger information through clustering techniques to correlate the identities between anonymous and real users in the blockchain system, posing a serious risk of privacy leakage. The ring signature is one of the digital signatures that achieves the unconditional anonymity of the signer. Therefore, by leveraging Distributed Key Generation (DKG) and Elliptic Curve Cryptography (ECC), a blockchain-enabled secure ring signature scheme is proposed. Under the same security parameters, the signature constructed on ECC has higher security in comparison to the schemes using bilinear pairing. In addition, the system master key is generated by using the distributed key agreement, which avoids the traditional method of relying on a trusted third authorizer (TA) to distribute the key and prevents the key leakage when the TA is not authentic or suffers from malicious attacks. Moreover, the performance analysis showed the feasibility of the proposed scheme while the security was ensured.
区块链集成了对等网络、分布式共识、智能合约、密码学等。它具有弱中心化、防篡改、可追溯性、开放性、透明性等独特优势，并广泛应用于金融和医疗等各个领域。然而，由于其开放透明的特性，攻击者可以通过聚类技术分析账本信息，以关联区块链系统中匿名用户与真实用户之间的身份，从而带来严重的隐私泄露风险。环签名是实现签名者无条件匿名的数字签名之一。因此，利用分布式密钥生成（DKG）和椭圆曲线密码学（ECC），提出了一种基于区块链的安全环签名方案。在相同的安全参数下，与使用双线性配对的方案相比，基于ECC构建的签名具有更高的安全性。此外，系统主密钥通过分布式密钥协商生成，避免了传统依赖可信第三方授权机构（TA）分发密钥的方法，并防止TA不真实或遭受恶意攻击时的密钥泄露。此外，性能分析表明该方案在确保安全性的同时具有可行性。
