关键词: 虚拟企业, 交互认证, 多策略, 可定期更新, 合谋攻击

Abstract: The interactive authentication among the member enterprises is the basis and premise of all security problems in Virtual Enterprise（VE）. None of the existing authentication schemes for VE can regularly update or multi-policy authenticate, and some can’t resist conspiracy attacks, some can’t trace the members’ identities, some put alliance master in the leading position, so their safety is low. A multi-policy regularly updatable interactive authentication scheme for VE is proposed, and its security analysis and efficiency comparison has been done. In the new scheme, certificates can be regularly updated, members are allowed to join or leave without changing the group’s private key which reduces the implementation cost, and certificates are generated by using different thresholds which adapt to the requirement of different members using different policy. The scheme also has conspiracy attack immune property, the identities traceability, partial signatures verifiable and other security advantages. Simulation results show that the proposed scheme is more efficient than other schemes.

Key words: virtual enterprise, interactive authentication, multi-policy, regularly updatable, conspiracy attack