建立安全匿名通信通道：形式化模型及其原型实现
Building Secure and Anonymous Communication Channel: Formal Model and its Prototype Implementation
摘要：
需要结合各种技术来实现匿名认证通信。加密工具支持匿名用户身份验证，而匿名通信协议则对服务提供商隐藏用户的IP地址。实现匿名认证通信的一种简单方法是它们的简单组合，但这引起了另一个问题;如何建立安全信道。由于用户的公钥标识了用户，因此无法使用当前的公钥基础设施。为了解决这个问题，我们提出了一个协议，使用基于身份的加密数据包加密，而不牺牲匿名性，和匿名用户认证的群签名。协议中的通信通过代理实体进行，代理实体对服务提供商隐藏用户的IP地址。底层的群签名是定制的，以满足我们的目标，并提高其效率。我们还介绍了一个概念验证的实现，以证明该协议的可行性。通过与SSL通信的性能比较，证明了该协议的实用性，并得出结论：该协议实现了用户与服务提供者之间的安全、匿名、认证的通信，具有实用性。
英文摘要：
Various techniques need to be combined to realize anonymously authenticated communication. Cryptographic tools enable anonymous user authentication while anonymous communication protocols hide users' IP addresses from service providers. One simple approach for realizing anonymously authenticated communication is their simple combination, but this gives rise to another issue; how to build a secure channel. The current public key infrastructure cannot be used since the user's public key identifies the user. To cope with this issue, we propose a protocol that uses identity-based encryption for packet encryption without sacrificing anonymity, and group signature for anonymous user authentication. Communications in the protocol take place through proxy entities that conceal users' IP addresses from service providers. The underlying group signature is customized to meet our objective and improve its efficiency. We also introduce a proof-of-concept implementation to demonstrate the protocol's feasibility. We compare its performance to SSL communication and demonstrate its practicality, and conclude that the protocol realizes secure, anonymous, and authenticated communication between users and service providers with practical performance.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
