针对基于认证证书的数字签名方案中公钥集中保存,系统容易受到主动攻击的缺点,提出了一种新的基于公钥自证明的认证加密方案。该方案中用户匿名注册,并获得由用户与CA共同产生的公钥证明,可以根据用户公钥证明推导其公钥;通信双方的公钥认证与消息签名结合在一起,由消息接收者在认证签名、恢复消息时完成公钥认证,因而减少了存储空间、通信量和计算量。 Aimed at the disadvantage of the system being easily attacked by the public key in the digital signature scheme based on the certificate, a new authentication scheme based on self-certification of public key is proposed. In this scheme, the user is registered anonymously and obtains the public key certificate jointly generated by the user and the CA. The public key can be derived from the public key of the user. The public key authentication and the message signature of both parties of the communication are combined and the message receiver is authenticated Signing, and recovering the message to complete the public key authentication, thus reducing the storage space, traffic and computation.