摘要
针对猕猴桃产业联盟链交易中金额与身份的双重隐私保护问题,提出一种基于+HomElG零知识证明(+HomElG zero knowledge proof,+HomElG-ZKProof)和SM2的猕猴桃产业联盟链隐私交易方案。首先,转账方利用+HomElG加密交易金额后将其发送给接收方,接收方基于SM2签名确认交易后发送给转账方;其次,转账方基于+HomElG-ZKProof对交易金额相关密文生成零知识证明证据,基于SM2可链接环签名对交易金额相关密文和交易双方身份分别生成环签名,与接收方SM2签名一起经系统层Raft共识打包上链;然后,由监管节点验证SM2签名、两次环签名及链接性后确认交易双方身份,用户节点间在应用层使用PBFT共识验证交易金额相关密文、环签名及交易金额相关零知识证明证据后确认交易的有效性;最后,由监管节点将有效交易区块编号经系统层Raft共识上链并更新账户余额。分析表明,该文方案具有抗篡改攻击、抗公钥替换攻击、抗假冒攻击以及匿名性,安全性较高;测试结果表明,该文方案可以实现猕猴桃产业联盟链用户交易金额、身份的双重隐私保护;在安全参数为2 048 bit时,交易时间为4.495 s,可以满足猕猴桃产业联盟链交易的实际需要。
To meet the privacy protection problem of amount and identity in kiwifruit industry consortium blockchain transactions,a kiwifruit industry chain privacy transaction scheme based on+HomElG-ZKProof(+HomElG zero knowledge proof)and SM2 was proposed.Firstly,the transaction amount with+HomElG was encrypted and sent to the receiver by the transferor,and the signature based on the SM2 to confirm the transaction was generated and sent to the transferor by the receiver.Secondly,zeroknowledge proof evidences for the ciphertext related to the transaction amount based on+HomElG-ZKProof,ring signatures for the ciphertext related to the amount and the identity of the transaction based on the SM2 linkable ring signature were generated,with the receiver’s SM2 signature was packaged and uploaded to the consortium blockchain through the system layer Raft consensus by the transferor.Then the SM2 signature,the two ring signatures,and the link to confirm the transaction identity were verified by the supervisory node,the PBFT consensus at the application layer was used by verifying the ciphertext related to the transaction amount,ring signature and the zero-knowledge proof evidence related to the transaction amount to confirm the validity of the transaction by the user nodes.Finally,the valid transaction block number through the Raft consensus of the system layer was uploaded and the account balance was updated by the supervisory node.The analysis showed that the proposed scheme had the advantages of anti tamper attack,anti public key substitution attack,anti counterfeiting attack and anonymity,and had higher security.The test results showed that the scheme can realize double privacy protection of transaction amount and identity of users in the kiwifruit industry consortium blockchain.The experimental results showed that when the security parameter was 2048 bit,the transaction time took about 4.495 s,it can meet the actual needs of kiwifruit industry consortium blockchain transactions.
作者
景旭
杨少坤
JING Xu;YANG Shaokun(College of Information Engineering,Northwest A&F University,Yangling,Shaanxi 712100,China)
出处
《农业机械学报》
EI
CAS
CSCD
北大核心
2023年第5期369-378,共10页
Transactions of the Chinese Society for Agricultural Machinery
基金
国家重点研发计划项目(2020YFD1100601)
陕西省重点研发计划项目(2021NY-179、2019ZDLNY07-02-01)
上合组织成员国农业技术集成示范与标准化研究项目。
