Abstract:

For the users' privacy security in electronic transactions, an electronic transaction scheme was proposed to protect the users' privacy. The scheme combined the oblivious transfer and ElGamal signature, achieved both traders privacy security in electronic transactions. A user used a serial number to choose digital goods and paid the bank anonymously and correctly. After that, the bank sent a digital signature of the digital goods to the user, then the user interacted with the merchant obliviously through the digital signature that he had paid. The user got the key though the number of exponentiation encryption, the merchant could not distinguish the digital goods ordered. The serial number was concealed and restricted, so the user could not open the message with the unselected serial number, they could and only could get the digital goods they paid. Correctness proof and security analysis shows that the proposed scheme can protect both traders mutual information in electronic transactions and prevent merchant's malicious fraud. The scheme has short signature, small amount of calculation and dynamic changed keys, its security is strong.

摘要：

针对电子交易中的隐私安全问题，提出了一个可保护用户隐私的电子交易方案。方案将不经意传输协议和ElGamal签名相结合，实现了电子交易中交易双方的隐私安全。用户使用序号选择商品，匿名付费给银行；银行将商品的数字签名发送给用户，用户使用数字签名和商家进行不经意信息交互；对序号进行幂运算加密得到密钥，商家不知道用户订购何种数字商品，序号的隐蔽性和制约性也使得用户不能以没有选择的序号打开消息，用户得到且只能得到自己订购的数字商品。正确性证明和安全性分析结果表明，方案保护了交易双方在电子交易过程中的交互信息，同时防止商家恶意欺诈行为。方案签名短，计算量小，密钥动态变化，安全性强。