针对电子调查存在的不少安全问题,如信息欺骗、隐私安全等,构建了一个基于非交互零知识证明(NIZK,non-interactive zero knowledge proofs)的匿名电子调查系统,系统具有自组织、非交互、防重放、更安全等特点。系统采用NIZK协议和Boneh-Boyen签名方案对用户的身份进行非交互式的验证,保证了系统的真实性;系统还采用Pedersen承诺方案和伪随机函数对用户的身份和相关信息进行隐藏,保证了系统的匿名性。安全性分析表明,系统具有抵抗恶意用户并发攻击和匿名性等安全特性。最后,对系统的功能进行了仿真并验证,结果表明,系统能够正确完成各项功能,并有效地保证系统的匿名性与真实性。
Aiming at the security problem that the existing in electronic surveys, such as information fraud, privacy security etc. An anonymous electronic survey scheme based on non-interactive zero knowledge proofs (NIZK) was constructed, which had the characteristics of self-organization, non-interactive, anti-replay, and high efficiency. The system uses the NIZK protocol and the Boneh-Boyen signature scheme to verify the user's identity in non-interactive manner, which guarantees the authenticity of the scheme. The system also uses the Pedersen commitment scheme and the pseudo random function to hide the user's identity and the related information, which guarantees the anonymity. Security analysis show that the system has security features such as malicious users attack resistance and anonymity. Finally, the function of the system was also verified and the result show that the system can accomplish all the functions correctly and guarantee the anonymity and authenticity of the system effectively.