Cryptographic Analysis and Improvement of the Structured Multi-signature Scheme for P2P E-Services

Abstract

So far, the trust data storage and transmission security problems are often neglected by researchers in P2P E-Service system. Burmester’s scheme and Harn’s scheme are two kinds of structured multi-signature schemes. They provided co-signers with different role/position have different management liability and authorization capability. This paper shows some insecurity in these schemes. There are two kinds of attacks on these schemes: (1) the schemes can’t resist the dishonest signer forgery attack by forging his own public key (2) everyone can forge some certain messages which to be sign and cannot detect by the signature verifier. Then a new structured signature scheme with verifying signature parameter and all the signers’ public keys was proposed. In this way, the new scheme can resist attacks as mentioned, and can be applied to the trust data security transmission in P2P E-Service system.