基于公钥的可证明安全的异构无线网络认证方案  

Provable Security Authentication Scheme Based on Public Key for Heterogeneous Wireless Network

作　　者：侯惠芳[1,2] 刘光强[2] 季新生[1] 张秋闻[2] 

机构地区：[1]国家数字交换系统工程技术研究中心,郑州450002 [2]河南工业大学信息科学与工程学院,郑州450001

出　　处：《电子与信息学报》2009年第10期2385-2391,共7页Journal of Electronics & Information Technology

基　　金：国家863计划项目(2007AA01Z434)资助课题

摘　　要：该文针对3G-WLAN异构网络的接入安全,对异构网络的实体进行抽象,建立了一种通用的认证模型。在该模型的基础上,利用Canetti-Krawczyk(CK)模型设计了一种新的接入认证与密钥协商方案。该方案利用公钥基础设施分配公钥,简化接入端服务器和归属端服务器间的认证过程和认证信息;利用椭圆曲线密码机制,减少了移动终端的认证计算量;最后利用CK模型对提出的协议进行了形式化分析和证明。分析表明该方案是安全有效的。Aiming at access security aspect of 3G-WLAN heterogeneous wireless network, this paper abstracts each entities of heterogeneous wireless network, thereby establishes a general authentication model. Then based on this general authentication model, a novel access authentication and key agreement scheme by using Canetti-Krawczyk （CK） model is devised. This scheme simplifies the authentication process and information between access network server and home network server by using Public Key Infrastructure （PKI） to distribute public key. It also decreases the authentication computational complexity of mobile terminal by Elliptic Curves Cryptography （ECC）. Finally, formal analysis and proof with CK model for the proposed protocol are given. It is showed that the proposed scheme is secure and efficient.

关 键 词：异构无线网络 椭圆曲线 接入认证 公开密钥基础设施 CK模型 

分 类 号：TN918.91[电子电信—通信与信息系统]