针对一种基于身份一次性公钥的构造方案给出2种攻击方法,指出其是可伪造的。基于超奇异椭圆曲线并利用一般椭圆曲线签名算法对基于身份的一次性公钥方案进行重新构造,新的构造方案能够抵抗伪造性攻击,是安全高效的。由于用户每次可以使用不同的公钥,方案可用于解决Internet通信中的匿名认证问题,实现用户隐私的有效保护。 Two kinds of attack methods are given for a construction scheme based on identity one-off public key, which indicates that it is forgery. Based on the super-singular elliptic curve and using the general elliptic curve signature algorithm to reconstruct the identity-based one-time public key scheme, the new scheme is safe and efficient to resist forgery attacks. Since users can use different public keys each time, the scheme can be used to solve the problem of anonymous authentication in Internet communications and effectively protect users’ privacy.