可证明安全的异构无线网络认证协议  

Provably secure authentication protocol for heterogeneous wireless networks

作　　者：李亚晖[1] 李凤华[1] 杨卫东[1] 马建峰[1] 

机构地区：[1]西安电了科技大学计算机网络与信息安全教育部重点实验室,陕西西安710071

出　　处：《通信学报》2007年第11期21-29,共9页Journal on Communications

基　　金：国家自然科学基金资助项目(60633020;60573036);北京电子科技学院信息安全与保密重点实验室资助项目(KYKF200604)~~

摘　　要：异构无线网络中互连的安全问题是当前研究的关注点,针对3G网络和WLAN(无线局域网)所构成的异构互连网络中认证协议的安全和效率问题,提出了一种基于离线计费方法的认证协议。该协议通过对WLAN服务网络身份进行验证,抵御了重定向攻击的行为;采用局部化重认证过程,减少了认证消息的传输延时,提高了认证协议的效率。仿真结果表明,该协议的平均消息传输延时相对于EAP-AKA协议缩短了大约一半。通过Canetti-Krawczyk(CK)安全模型对新协议进行了安全性证明,证明该协议具有SK-secure安全属性。Security of heterogeneous wireless networks has attracted the attention of researchers. Considering security and efficiency problems on EAP-AKA protocol in the 3G-WLAN interworking networks, an authentication protocol based on a way of offfine billing was proposed. It verified the identity of WLAN access network to prevent the re-direction attack, and used the localized authentication mechanism to reduce the message transmission delay and improve the efficiency of reauthentication process. Simulation results show that the average message transmission delay of the proposed protocol is about half shorter than that of EAP-AKA. By analyzing the security of the proposed protocol with Canetti-Krawczyk （CK） model, it proves that the proposed protocol satisfy the definition of Session Key security defined in the CK model.

关 键 词：通用移动通信系统 无线局域网 会话密钥 扩展认证密钥协商协议 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]