可公开验证的高效无证书聚合签密方案

签密技术是构建网络信任体系的基础，能够保证数据的机密性、完整性和可验证性，但是当大量用户同时进行签密时，验证耗时较长。聚合签密技术将大量用户的签名进行聚合，并提供批量验证以提高验证效率。针对现有基于双线性映射的聚合签密方案存在聚合验证效率低、不满足可公开验证性的问题，基于计算双线性Diffie-Hellman和计算性Diffie-Hellman困难问题假设，提出可公开验证的无证书聚合签密方案。采用双线性映射运算将发送方与接收方的身份信息分别添加到签名和密文中，以隐藏用户身份信息。在随机预言模型下验证该方案的机密性和不可伪造性，并且在对数据的真实性产生质疑时，通过任何可信第三方对验证等式进行计算，无需用户私有信息，具有可公开验证性。分析结果表明，该方案具有较少的运算开销，在聚合验证阶段，仅使用2次固定的双线性映射运算，能够有效提高运算效率。     

无证书的可公开验证聚合签密方案

聚合签密的研究多以基于身份密码体制下提供机密性与认证性,提高验证的效率为目标,存在对证书管理以及密钥托管问题,因此需要设计新的聚合签密算法,在解决证书管理以及密钥托管问题的同时兼顾机密性与高效性。分析了当前主流的聚合签密算法及其发展,利用Zhang等(ZHANG L, ZHANG F T. A new certificateless aggregate signature scheme. Computer Communications, 2009,32(6)：1079-1085)方案,并考虑上述需求,提出了一种新的无证书的聚合签密方案。方案基于双线性Diffie-Hellman(BDH)和计算性Diffie-Hellman(CDH)问题,证明了方案的机密性和不可伪造性。实验结果表明,所提方案在聚合解签密运算量上与其他方案持平或降低;同时,新的方案还满足了可公开验证性,消除了公钥证书的使用,并且解决了基于身份密码体制中的密钥托管问题。     

标准模型下安全基于身份代理签密方案

针对现实中代理签密的安全问题,提出一种基于Gu等（GU K, JIA W J, JIANG C L. Efficient identity-based proxy signature in the standard model. The Computer Journal, 2013:bxt132）代理签名的标准模型下可证安全的基于身份代理签密方案。代理签密允许原始签密者授权签密能力给代理签密者,后者能够代表前者生成密文。该方案通过结合基于身份签密和代理签名,既保持了基于身份签密的优点,又具有代理签名的功能。分析表明,基于Diffie-Hellman问题假设下,所提方案满足机密性性和不可伪造性。与已知方案相比,代理密钥生成算法和代理签密算法中各需要2个对运算和1个对运算,方案效率更高。     

不含双线性对的高效无证书聚合签密方案

现有的聚合签密方案主要是基于复杂的双线性对构造,计算效率较低,不能很好地适用于计算资源和通信带宽受限的应用环境。为了提高聚合签密的效率,提出一种不含双线性对映射的无证书聚合签密方案。基于计算Diffie-Hellman问题（CDHP）和离散对数问题（DLP）的困难性,在随机预言模型下证明了方案满足机密性和不可伪造性。该方案不含双线性对运算和指数运算,在单签密阶段仅需要2个点乘运算,与已有的典型聚合签密方案相比具有更高的计算效率且密文长度更短;而且方案的聚合签密验证阶段无需任何用户的秘密信息,方案具有可公开验证性;此外,方案在部分私钥生成阶段不需要安全信道,降低了通信复杂度。     

可证明安全的基于身份的聚合签密方案

为了更有效地保护网络信息的安全,需要同时实现消息的机密性和认证性。签密方案能够在一个逻辑步骤内同时实现对消息的签名和加密。为了提高当前已存在的签密方案的安全性和算法效率,结合聚合签名的思想,提出一种基于身份的聚合签密方案。在随机语言模型中证明了该方案具有适应性选择密文攻击下的不可区分性,在适应性选择消息攻击下是存在性不可伪造的,其安全性归约为计算椭圆曲线离散对数问题和双线性Diffie-Hellman问题的困难性。与目前效率较高、密文长度较短的几个方案进行比较的结果表明,新方案的签密和解签密过程分别仅需1次双线性对运算,具有计算成本低、密文长度短的优良特性。     

基于区块链的V2G无证书环签密隐私保护方案

为实现车辆到电网(V2G)系统中车辆用户交易信息隐私保护和通信消息安全传输,提出一种基于区块链的无证书环签密隐私保护方案。在交易阶段采用无证书环签密对服务数据进行加密,减少签密过程中的双线性配对运算与指数运算,同时引入聚合签名技术降低签名验证的计算开销。在交易完成后将记录的服务数据与交易账单聚合为交易数据,将交易数据哈希、服务数据的环签密以及交易编号返回至区块链进行存储,而完整交易数据由云服务器存储,用户需要提供交易数据对应的环签密及交易编号,并通过智能合约完成对交易数据的访问。在随机预言模型下,通过安全分析来验证该方案的匿名性、可认证性、机密性和不可伪造性。实验结果表明,相较3种对比方案,该方案的计算开销具有明显优势,在签名数量增加到50个时,其聚合签名验证的计算开销减少近50%,同时能保证数据的机密性和成员通信的匿名性,有效提高V2G网络中的通信效率。     

适用于物联网通信的无证书聚合签密算法

针对目前无证书聚合签密（CLASC）方案计算效率较低的问题,提出了一个适合于物联网的无双线性对的聚合签密方案。与目前较好方案相比,运算效率提高了近六倍,在聚合签密阶段只需要2◢n◣+1次点乘运算,在聚合解签密阶段需要5◢n◣+1次点乘运算。基于离散对数问题,在随机预言模型下证明了方案满足机密性和不可伪造性;在聚合签密验证阶段,不需要第三方的秘密信息,方案满足可公开验证性。最后,指出该方案能以较低的计算速率实现较高的安全性,更适合用于物联网。     

ECDSA可公开验证广义签密

签密是一种能够同时提供加密和认证功能的密码体制，该文首次将答密的应用范围推广到仅需要机密性或完整性的场合，提出了广义签密的定义．广义签密不仪具有一般签密的属性，针对特定的输入还可提供单独的加密或签名功能．基于椭圆曲线数字签名标准ECDSA，文中提出一个广义签密方案SC-ECDSA，无特定验证方时等价于ECDSA签名，无特定发送方时等价于AtE（OTPs，MAC）结构加密，第三方可在ECDSA的模式下公升验证，在Random Oracle模型上证明了该方案的安全性：CUFCPA的机密性、与ECDSA同等的小可伪造性和不可否认性，效率分析表明，在适当的安全参数下SC-ECDSA的计算培比目前最快的SCS签密降低了78％。     

基于双线性对的无证书聚合签密方案

签密是一种能在一个逻辑步骤内同时提供消息的机密性和消息源认证性的密码原语。针对目前基于双线性对的无证书聚合签密(CLASC)方案效率较低的问题,提出了一种新的基于双线性对的无证书聚合签密方案。在该方案中,任何用户均可作为聚合者发起签密协议。用户生成签密密文后,密文被发送给聚合者进行聚合。安全性分析证明了该方案在随机预言模型下满足不可伪造性和保密性。对比结果表明所提方案仅要求每位签密者进行一次对运算,能够提高计算效率,有利于对实时性要求较高的应用。     

基于身份的门限环签密方案

把基于身份的环签密和门限签名结合起来,提出了一个基于身份的门限环签密方案。此方案不但具有签密的一般性质：机密性和认证性,还具有签密者的匿名性和门限性质。在CDHP、DBDHP困难性假设下,分别证明了方案在适应性选择消息攻击下的不可伪造性以及在适应性选择密文攻击下的不可区分性。     

Call for Papers The 6^th International Conference on Grid and Cooperative Computing

Recent years have seen rapid advances in various grid-related technologies, middleware, and applications. The GCC conference has become one of the largest scientific events worldwide in grid and cooperative computing. The 6th international conference on grid and cooperative computing (GCC2007) Sponsored by China Computer Federation (CCF),Institute of Computing Technology, Chinese Academy of Sciences (ICT) and Xinjiang University ,and in Cooperation with IEEE Computer Soceity ,is to be held from August 16 to 18, 2007 in Urumchi, Xinjiang, China.     

煤矿井下安全监控分站的设计及其仿真实现

为了设计一种具有低成本、低功耗、易操作、功能强且可靠性高的煤矿井下安全分站,针对煤矿安全生产实际,文章提出了采用MCS-51系列单片机为核心、具有CAN总线通信接口的煤矿井下安全监控分站的设计方案;首先给出煤矿井下安全监控分站的整体构架设计,然后着重阐述模拟量输入信号处理系统的设计过程,最后说明单片机最小系统及其键盘、显示、报警、通信等各个组成部分的设计;为验证设计方案的可行性与有效性,使用Proteus软件对设计内容进行仿真验证,设计的煤矿井下安全监控分站具有瓦斯、温度等模拟量参数超标报警功能和电机开停、风门开闭等开关量指示功能;仿真结果表明:设计的煤矿井下安全监控分站具有一定的实际应用价值.     

法律信息库系统

本文分析了法律数据库的结构和特点，介绍了采用面向对象设计方法和超文本数据库技术开发和实现法律信息库系统将作为重要网络资源之一为不同用户进行法律咨询服务。     

View-based model-driven architecture for enhancing maintainability of data access services

In modern service-oriented architectures, database access is done by a special type of services, the so-called data access services (DAS). Though, particularly in data-intensive applications, using and developing DAS are very common today, the link between the DAS and their implementation, e.g. a layer of data access objects (DAOs) encapsulating the database queries, still is not sufficiently elaborated, yet. As a result, as the number of DAS grows, finding the desired DAS for reuse and/or associated documentation can become an impossible task. In this paper we focus on bridging this gap between the DAS and their implementation by presenting a view-based, model-driven data access architecture (VMDA) managing models of the DAS, DAOs and database queries in a queryable manner. Our models support tailored views of different stakeholders and are scalable with all types of DAS implementations. In this paper we show that our view-based and model driven architecture approach can enhance software development productivity and maintainability by improving DAS documentation. Moreover, our VMDA opens a wide range of applications such as evaluating DAS usage for DAS performance optimization. Furthermore, we provide tool support and illustrate the applicability of our VMDA in a large-scale case study. Finally, we quantitatively prove that our approach performs with acceptable response times.     

International Journal of Automation and Computing Table of Contents

正~~     

Information for authors

正SCIENCE CHINA Information Sciences(Sci China Inf Sci),cosponsored by the Chinese Academy of Sciences and the National Natural Science Foundation of China,and published by Science China Press,is committed to publishing highquality,original results of both basic and applied research in all areas of information sciences,including computer science and technology;systems science,control science and engineering(published in Issues with odd numbers);information and communication engineering;electronic science and technology(published in Issues with even numbers).Sci China Inf Sci is published monthly in both print and electronic forms.It is indexed by Academic OneFile,Astrophysics Data System(ADS),CSA,Cabells,Current Contents/Engineering,Computing and Technology,DBLP,Digital Mathematics Registry,Earthquake Engineering Abstracts,Engineering Index,Engineered Materials Abstracts,Gale,Google,INSPEC,Journal Citation Reports/Science Edition,Mathematical Reviews,OCLC,ProQuest,SCOPUS,Science Citation Index Expanded,Summon by Serial Solutions,VINITI,Zentralblatt MATH.     

Erratum to: Fast global kernel fuzzy c-means clustering algorithm for consonant/vowel segmentation of speech signal

正Erratum to:J Zhejiang Univ-Sci C(ComputElectron)2014 15(7):551-563doi:10.1631/jzus.C1300320The original version of this article unfortunately contained mistakes.Algorithm 6 should be as follows:Algorithm 6 FGKFCM-F clustering Input:(1)X={x_1,x_2,…,x_N},,x_iR~d,i=1,2,…,N,the dataset;(2)C,1C≤N,the number of clusters;(3)ε0,the stopping criterion;     

Journal of Zhejiang University-SCIENCE C (Computers & Electronics) Total contents

正~~     

A pragmatic multi-method investigation of discrepant technological events: Coping,attributions, and ‘accidental’ learning

Discrepant technological events or situations that entail a problem, a misunderstanding or a difficulty with the Information Technology (IT) being employed, are common in the workplace, and can lead to frustration and avoidance behaviors. Little is known, however, about how individuals cope with these events. This paper examines these events by using a multi-method pragmatic approach informed by coping theory. The results of two studies – a critical incident study and an experiment – serve to build and test, respectively, a theoretical model that posits that individuals use a variety of strategies when dealing with these events: they experience negative emotions, make external attributions, and adopt engagement coping strategies directed at solving the event, eventually switching to a disengagement coping strategy when they feel they have no control over the situation. Furthermore, users’ efforts may result in ‘accidental’ learning as they try to overcome the discrepant IT events through engagement coping. The paper ends with a discussion of the results in light of existing literature, future opportunities for research, and implications for practice.