群签名与广播加密的对偶性及应用

提出群签名(GS)与广播加密(BE)是一对关系密切的对偶密码系统,类似公开加密与普通签名的对偶关系,即基于GS方案可以构建BE方案.而基于BE方案也可以构建GS方案.文中给出实现这种对偶关系的具体构建方法与步骤,即基于NP(non-deterministic polynomial)证据加密(WE)可把一个可撤销群签名方案转换为一个可撤销广播加密方案,而基于非交互式零知识(NIZK)证明可把一个撤销广播加密方案转换为一个可撤销群签名方案.最后,指出基于广播加密的高效可撤销群签名方案可以纳入文中所提出的框架中

Duality Between Group Signature and Broadcast Encryption and Its Applications

Group signature(GS)and broadcast encryption(BE)are shown to be dual with each other, similar with the duality between public key encryption(PKE)and digital signature. Namely, BE can be transformed to a GS scheme and vice versa. Concrete construction methods and procedures are given i.e., a revocable GS scheme can be transformed to a BE scheme based on NP(non-deterministic polynomial)witness encryption(WE)and a revocable BE can be transformed to a GS based on non-interactive zero knowledge(NIZK)proof. Finally, it point out that an efficient revocable GS scheme based on BE is also shown to be one incarnation of our framework.