A New Authentication Scheme Based on Verifiable Secret Sharing

A new authentication scheme based on verifiable secret sharing is proposed. To prevent the authority cheating, the certification authority (CA) in our scheme consists of n members whose shares are distributed without the assistance of a dealer. At least t members are necessary to create a certificate, and less than t members can do nothing, so that our scheme is more secure than conventional certificate-based solutions. The user who wants to apply for a certificate can directly broadcast his ID and public key to all members of CA, and compute his certificate by himself after receiving the partial signatures from at least t members, which avoids the complicated certificate management and makes the scheme more feasible.