目前,门限多代理多签名凭借其具有多种特殊功能而受到广泛关注。迄今为止,人们已经提出了许多门限多代理多签名方案,但大部分方案都存在缺陷。Tzeng等提出了一个具有共享验证性质的门限多代理多签名方案。后来,Kang等指出Tzeng方案存在缺陷并提出了一个新的方案。但Kang方案仍然存在缺陷,即Kang方案不能抵抗恶意的内部人员实施的伪造攻击,由此攻击造成严重的后果。在分析攻击原因的基础上于是提出了一个改进措施。
At present, threshold multi-proxy multi-signature has aroused extensive attention for its multiple special functions. So far, people have proposed a lot of threshold multi-proxy multi-signature schemes, but most of them have flaws. Tzeng et al proposed a threshold multi-proxy multi-signature scheme with shared verification in 2004. Later, Kang et al pointed out that the scheme of Tzeng has weakness and proposed a new one. This paper points out that there is still the weakness in the scheme of Kang, that is, Kang' s scheme cannot resist spoofing attack exerted by malicious internal members. Thus, this paper gives a detailed description to the consequence caused by the attack, and then proposes an improved scheme on the basis of analyzing the cause of the attack.