Public key infrastructure has been widely used, but its certificate must be removed when a corresponding public key is sent via an anonymous communication channel in order to maintain anonymity. It is because the certificate contains information of the key holder, and that contradicts anonymity. A secure and anonymous communication protocol was proposed to address this issue, where end-to-end encryption and anonymous authentication are achieved simultaneously. It applies identity-based encryption (IBE) for packet encryption. However, because IBE requires heavy pairing computations, this protocol is inefficient and approximately 20 times slower than that of SSL communications. In this paper, we propose a more efficient, secure, and anonymous communication protocol, which achieves the same security level as the IBE-based protocol does. The protocol is exempted from pairing computation for establishing a secure channel by applying hybrid encryption instead of IBE. We implement the protocol and show that it is more efficient (overall approximately 1.2 times faster) than the IBE-based protocol. In particular, the decryption algorithm of our protocol is several hundred times faster than that of the IBE-based protocol.

A KEM/DEM-Based Construction for Secure and Anonymous Communication.

The invention discloses a deniable authentication encryption method and system based on a certificateless environment, and the method comprises the steps: generating a symmetric key through employinga private key of a sender, and generating a ciphertext which can carry out deniable authentication on a message; enabling the receiver to verify the legitimacy of the symmetric key by using the private key of the receiver; if the symmetric key is legal, decrypting the original message; otherwise, refusing the symmetric key. Encrypted communication based on the certificateless environment and capable of denying authentication is achieved, and end-to-end safety guarantee is provided for a user based on the certificateless environment.

Deniable authentication encryption method and system based on certificateless environment

Mobile payment services have been widely applied in our daily life, where users can conduct transactions in a convenient way. However, critical privacy concerns have arisen. Specifically, a risk of participating in a transaction is the disclosure of personal privacy. This might occur if, for example, the user pays for some special medicine, such as AIDS medicine or contraceptives. In this paper, we propose a mobile payment protocol that is suitable for mobile devices only with limited computing resources. In particular, the user in a transaction can confirm the identity of others in the same transaction while the user cannot show convincing evidence to prove that others also take part in the same transactions. We implement the proposed protocol and test its computation overhead. The experiment results corroborate that the proposed protocol is suitable for mobile devices with limited computing resources.

/pdf/mobile-payment-protocol-with-deniably-authenticated-property-dbzl1dz6.pdf

Mobile Payment Protocol with Deniably Authenticated Property

The invention provides a non-interactive authentication method for Internet of Things data processing. The method comprises: enabling a data acquisition end to generate a first private key and a firstpublic key, and sending the first public key to a key generation center so as to allow the key generation center to generate a first initial part key for the data acquisition end according to the first public key, and sending the first initial part key to the data acquisition end; receiving a first initial part key, and generating a second private key and a second public key according to the first initial part key and the public parameters of the key generation center; receiving a plurality of ciphertext sent by a plurality of user sides; aggregating the plurality of ciphertext to generate anaggregated ciphertext; and performing aggregation authentication on the aggregation ciphertext according to the first private key, the second private key and the plurality of public keys of the plurality of clients to authenticate the plurality of clients. The data collector only receives the data sent by the plurality of user sides without sending the authentication interaction information to the user sides, so that the identity and message authentication of the plurality of user sides can be realized.

Non-interactive authentication method and system for Internet of Things data processing

The invention aims at solving the problem of heterogeneous deniable authentication communication of a sender in a certificateless-based environment and a receiver in a public key infrastructure-basedenvironment, and provides a heterogeneous deniable authentication method and system. The method comprises the steps that system parameters are set in a private key generation center in a certificateless environment, and a main private key and a main public key of the private key generation center are generated; the sender in the certificateless environment generates a deniable authentication codeaccording to the set system parameters in the certificateless environment, a sender identity IDA, a sender public key PKA, a sender complete private key SA, a receiver public key pkB and a message m and sends the deniable authentication code to the receiver; and after receiving the message m and the deniable authentication code, the receiver verifies the correctness of the deniable authenticationcode. According to the method and system, deniable authentication communication from the certificateless environment to the public key infrastructure environment provides an end-to-end security guarantee and a deniable service for a user in the certificateless-based environment and a user in the public key infrastructure-based environment.

Heterogeneous deniable authentication method and system

Deniable authenticated encryption can achieve confidentiality and deniable authentication in a logical single step. Such a cryptographic primitive simplifies the design of cryptographic scheme and reduces the cost of computation and communication. In this paper, we propose a heterogeneous deniable authenticated encryption scheme called HDAE. The proposed scheme permits a sender in a public key infrastructure environment to transmit a message to a receiver in an identity-based environment. Our design utilizes tag-key encapsulation mechanism (tag-KEM) and data encapsulation mechanism (DEM) hybrid encryption methods, which is especially applicable in some privacy protection occasions. In addition, we give how to design an HDAE scheme utilizing a heterogeneous deniable authenticated tag-KEM (HDATK) and a DEM. We also construct an HDATK scheme and provide security proof in the random oracle model. Comprehensive analysis shows that our scheme is efficient and secure.

Heterogeneous Deniable Authenticated Encryption Protocol

The invention discloses a deniable authentication encryption method and system based on a heterogeneous system. The encryption method comprises the following steps that a sender generates a symmetrickey K through bilinear pair and Hash function operation; the sender executes an encryption process through XOR, a Hash function, dot multiplication, dot addition and bilinear pair operation accordingto the symmetric key K, the internal state information omega, the label Tau and the message m; the receiver executes a decryption process according to the packaging ciphertext c, the label Tau, the identity information IDs of the sender, the main public key Ppub and the private key xr of the receiver; and if the verification is passed, the symmetric key is output and the original message is recovered, otherwise, the symmetric key sent by the user is refused. Theoretical basis and technical guarantee are provided for communication between a sender and a receiver which belong to a public key infrastructure environment, and end-to-end confidentiality, integrity and denial authentication services can be provided for a user based on the identity environment and a user in the public key infrastructure environment.

Jin Chunhua

Papers

Heterogeneous deniable authentication method and system

Heterogeneous Deniable Authenticated Encryption Protocol

Deniable authentication encryption method and system based on heterogeneous system