| Creator |
|
|
|
|
|
|
|
|
|
| Language |
|
| Publisher |
|
| Date |
|
| Source Title |
|
| Source Title |
|
| First Page |
|
| Last Page |
|
| Publication Type |
|
| Access Rights |
|
| Related DOI |
|
| Related URI |
|
| Relation |
|
| Abstract |
本稿では，認証の度にサービス提供者が中央機関と通信を行うタイプの，マルチサービス環境の匿名認証システムに注目する．本稿の目的は，このようなシステムに対して，安全性とプライバシ保護に関する4つの要件，すなわち，完全性，受動的内部攻撃者にへのなりすまし耐性，中央機関への匿名性，サービス提供者への匿名性を満たす実用的なプロトコルの実現である．既存プロトコルは，複数データベースPIR という要素技術を用い...て実現された．しかしながら複数データベースPIR では，同じデータベースの複製を用意し，さらにそれらのデータベースが互いに通信を行わないという前提が必要となる．本稿では，シングルデータベースPIR を用いた認証プロトコルを提案する．このプロトコルは，前述の前提が必要ないため，より実用的である．
This paper focuses on authentication systems in multi-service environment, in which service providers communicate with the central manager in every authentication. The purpose of this paper is to realize a practical authentication protocol for such systems which satisfies four requirements for security and privacy protection, that is, correctness, impersonation resistance against passive insider, anonymity against central manager, and anonymity against service providers. The existing protocol consists of a multi-database PIR scheme, in which there are copies of the same database and none of these copies are allowed to communicate with each other. This paper proposes an authentication protocol which consists of the single-database PIR scheme. This protocol is more practical since using a single database implies the above-mentioned assumptions for multi-database PIR schemes are not required any more.show more
|
Export Mendeley
toru10_1