能容纳拜占庭错误的身份认证协议  

A Byzantine faults-tolerance protocol of identity authentication

作　　者：付小青[1] 沈剑[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《华中科技大学学报（自然科学版）》2005年第5期22-25,共4页Journal of Huazhong University of Science and Technology(Natural Science Edition)

摘　　要：对ABBA协议进行了改进,引入了中止消息并对算法进行了优化,使其具有更好的效率和实用性,同时为保证ABBA协议能符合组合多方安全性的要求,提出了一种根据本地局部递增序列和签名的方式构造全局唯一TID(交易标识符)的方法,最后通过在TID中加入客户请求等相关信息的方式重构TID,使得ABBA协议能应用在提供身份认证服务的KDC(密钥分发中心)中,从而提高KDC的可靠性,并具体探讨了身份认证协议中服务认证,用户密钥修改以及域间认证过程.ABBA (asynchronous binary Byzantine agreement) is updated by introducing abort message and optimizing algorithms to gain better efficiency and practicability to ensure ABBA′s security under composite multi-party, a method to construct global unique TID (transaction identifier) in accordance with local auto-increment sequence and signature on it was presented. TID reconstructed by attaching client request and related information, so that the updated ABBA can be applied to KDCs (key distributed centers) that provide the service of identity authentication, and improves the reliability of KDCs. The procedure of service authentication, change of user secret key and identity authentication in inter-domain in the protocol of identity authentication were also discussed.

关 键 词：身份认证协议 拜占庭错误 拜占庭一致性 组合多方安全性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]