摘要：

随着工业领域对智能化要求的不断提高，工业物联网（IIoT）得到了快速发展，其可以有效提高工业生产中的流程效率和决策质量，具有广阔的应用前景。然而，近年来IIoT的安全问题逐渐凸显。针对远程指令控制这一应用场景，设计一种基于SM9标识密码算法的两方协同群签名算法，并结合区块链实现面向IIoT的远程安全指令控制方案，以保障IIoT中远程指令操作的安全性。该方案基于国密SM9标准，群管理员审核指令，并与发起指令签署请求的用户协同完成群签名，群签名在保护签名者身份隐私的同时可以由群管理员在必要时公开签名者身份。通过引入区块链技术，实现IIoT平台的去中心化管理，并通过智能合约获取指令执行历史数据，方便后续审计与追责。此外，方案在签名验证阶段通过批量验证来有效减少计算消耗。安全性及性能分析结果表明：在签名数量超过20条时，该方案通过批量验证的方式可以使得计算量减少50%以上；相较对比方案，所提方案在IIoT环境下安全性和实用性更高。

关键词: SM9标识密码算法, 群签名, 两方协同签名, 工业物联网, 区块链

Abstract:

With the increasing demand for intelligence in the industrial field, the Industrial Internet of Things(IIoT) has developed rapidly. IIoT can effectively improve process efficiency and decision quality in industrial production and has broad application prospects. However, in recent years, the security issues of IIoT are gradually becoming well known. A two party collaborative group signature algorithm is designed based on the SM9 identity-based cryptography for the application scenario of remote instruction control, and it is combined with a blockchain to implement a remote secure instruction control scheme for IIoT to ensure the security of remote instruction operations in IIoT. This scheme is based on the national security SM9 standard. The group administrator reviews instructions and collaborates with the user who initiated the instruction-signing request to complete the group signature. The group signature protects the privacy of the signer's identity while allowing the group administrator to publicly disclose the signer's identity when necessary. By introducing blockchain technology, decentralized management of the IIoT platform can be achieved, and command execution history data can be obtained through smart contracts, facilitating subsequent auditing and accountability. In addition, the scheme effectively reduces computational consumption through batch verification during the signature verification stage. The security and performance analysis results show that when the number of signatures exceeds 20, this scheme can reduce the computational load by more than 50% through batch verification. Compared to the comparison scheme, the proposed scheme has higher security and applicability in the IIoT environment.

Key words: SM9 identity-based cryptography algorithm, group signature, two-party collaborative signature, Industrial Internet of Things(IIoT), blockchain