异构无线网络可证安全的接人认证和密钥交换协议  

Authentication and Key Exchange Protocol with Provable Security for Heterogeneous Wireless Access

作　　者：蒋军[1] 何晨[1] 蒋铃鸽[1] 

机构地区：[1]上海交通大学电子工程系,上海200244

出　　处：《电子学报》2005年第B12期2294-2300,共7页Acta Electronica Sinica

基　　金：国家自然科学基金（No.60272082,No.60372076）;上海市重大科技项目（No.03DZl5010）

摘　　要：针对异构网络模型BRAIN（Broadband Radio Access for IP based Network）中的安全第一跳通信，提出一种新的基于Canetti-Krawczyk（CK）可证安全模型的双向认证和密钥交换协议．根据该模型方法，首先构造并证明了一种理想环境下的混合密钥交换协议HKE；然后利用现有安全的消息传输认证器构造一个适合BRAIN网络安全第一跳的认证器．最后利用该认证器自动编译理想的HKE协议，得到可证安全和实际可行的PHKE协议．分析比较表明，该协议更安全有效．Based on the provable security model of Canetti and Krawczyk （CK）, a new session key exchange （KE） protocol with mutual authentication was proposed focusing on the secure first hop in heterogeneous wireless network BRAIN （Broadband Radio Access for IP based Network）. By using the CK model, a hybrid KE （HKE） protocol in the ideal world with security proof was first proposed. Then three provably secure message transmission authenticators were reused and integrated to form a new authenticator appropriate for heterogeneous wireless scenario. Finally the practical HKE （PHKE） protocol is induced by using this authenticator. The protocol is not only secure with security proof, but also efficient for considering the asymmetric wireless environment.

关 键 词：可证安全 安全密钥交换 认证器 异构无线接入 混合密钥交换协议 BRAIN 

分 类 号：TN918.91[电子电信—通信与信息系统]