摘要
针对现有虚拟企业交互认证方案中存在的安全问题,提出了一个抗联盟攻击的广义虚拟企业交互信任方案。该方案通过赋予虚拟企业盟主关于私钥的一个决定因子,使得虚拟认证中心的私钥生成和证书颁发必须有盟主的参与,并保持了信任权限可灵活分配的优点,同时完善了虚拟企业信任交互方案的安全性。分析表明,该方案可以防范那些已退出联盟的恶意成员对系统的联盟攻击,适合复杂动态的虚拟企业环境。
A generalized interactive authentication scheme against collusion attack for Virtual Enterprises （VE） was proposed, aiming at the security flaw in the existing interactive authentication scheme for VE. By assigning an important parameter as partial private key to the hegemonic enterprise in VE, the hegemonic enterprise was required to take part in the private key generation and certificate issue for the Virtual Certificate Authority （VCA） in the new scheme. The new scheme not only maintained flexible assignment of league members＇ share set, but also remedied the security flaw in the existing interactive authentication scheme for VE. Analysis showed that the new scheme could prevent the collusion attack launched by quitted members, and was more suitable for complicated and dynamic environment of VE.
出处
《计算机集成制造系统》
EI
CSCD
北大核心
2008年第7期1410-1416,共7页
Computer Integrated Manufacturing Systems
基金
国家863计划资助项目(2007AA010305)
教育部科学技术研究重点项目(208139)
陕西省自然科学研究计划资助项目(2006F37)~~
关键词
虚拟企业
虚拟认证中心
门限签名
联盟攻击
数据安全
virtual enterprise
virtual certificate authority
threshold signature
collusion attack
security of data
