基于椭圆曲线的隐私增强认证密钥协商协议  

Privacy-Enhancing Authenticated Key Agreement Protocols Based on Elliptic Curve Cryptosystem

作　　者：曹天杰[1] 雷红[1] 

机构地区：[1]中国矿业大学计算机科学与技术学院,江苏徐州221116

出　　处：《电子学报》2008年第2期397-401,共5页Acta Electronica Sinica

基　　金：江苏省自然科学基金(No.BK2007035);中国矿业大学科技基金(No.0D0601624287)

摘　　要：认证密钥协商协议能够为不安全网络中的通信双方提供安全的会话密钥,但是,大多数的认证密钥协商协议并没有考虑保护用户隐私.论文关注网络服务中用户的隐私属性,特别是匿名性和可否认性,规范了增强用户隐私的认证密钥协商协议应满足的安全需求,即双向认证、密钥控制、密钥确认、会话密钥保密、已知会话密钥安全、会话密钥前向安全、用户身份匿名、用户身份前向匿名、不可关联和可否认,并基于椭圆曲线密码系统设计了一个满足安全需求的隐私增强认证密钥协商协议.Authenticated key agreement protocol is designed to provide pair of parties communicating over an insecure network with a secure session key.However,most of the existing authenticated key agreement protocols are not designed for protecting privacy. We emphasize user＇ s privacy properties in network services, in particular we stress anonymity and deniability. We specify the desired security properties of privacy-enhancing authentication key agreement protocols,i, e.mutual authentication,key control, key confirmation, se.ssion-key confidentiality, known-key security, forward secrecy, anonymity of user, forward anonymity of user, unlinkability, deniability. Based on elliptic curve cryptosystem we also propose a protocol which satisfies all the desired security properties.

关 键 词：匿名性 可否认性 认证密钥协商 椭圆曲线 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]