A Controllable and Trusted Anonymous Communication Scheme
Wu Zhen · Chinese Journal of Computers · 2010
Encryption technology can only carry on the protection to the correspondence data content,but in some special application fields,such as e-voting,e-health,e-commerce and e-cash,the protection degree of private information,like user's identity,behavior,geographical location and so on,is one of important attributes to assess the overall system security.The anonymous communication technology that is strongly resistant to both eavesdropping and traffic analysis is the commonly used privacy protection method,but this technology can not only enhance an user's identity information but also protect a malicious user's identity and behavior.How to protect an authorized user's privacy and prevent malicious attacks is the key of promote the large-scale application of anonymous communication technology.A controllable and trusted anonymous communication architecture that build up the computer security with trusted computing based on the trusted platform module is proposed.The architecture realizes the sender's anonymity through a group communication technology,and achieves the protection of privacy information in user behavior,user geographical position by encapsulating package with nested encryptions in communication link.The anonymous communication scheme based on the architecture consists of four functional modules,such as getting group information by the user register for authentication management center(AMC),trusted user node list that was downloaded from the server after the user have passed the trusted evaluation,established anonymous communication link by randomly selected node,and traceable service of malicious behavior to services provider.This paper has carried on the systematization design to these modules,and gives each module a corresponding protocol.It is shown that the scheme has good security,controllability and credibility by analysis and simulation of safety,dependability,anonymity,and efficiency.The scheme can meet the demand of the large scale deployment of anonymous communication system in the future Internet.