一种改进的IKEv2协议及其形式化验证  

Improved IKEv2 protocol and its formal verification

作　　者：韩明奎[1] 潘进[1] 李波[1] 

机构地区：[1]西安通信学院,西安710106

出　　处：《计算机应用研究》2010年第2期707-711,共5页Application Research of Computers

基　　金：国家"863"计划资助项目(2007AA01Z472)

摘　　要：针对IKEv2协议在系统开销和发起方身份保护方面的不足,提出了一种改进协议的方案。新的协议采用基于超椭圆曲线的W eil对技术进行数字签名认证,并且首先认证响应方身份。通过该方案,改进后的协议降低了系统开销,实现了对发起方身份的主动保护。最后,基于应用pi演算的方法对协议进行了建模,并定义和分析了协议的安全属性。结果表明,改进后的协议具有更好的安全性和实用性。IKEv2 protocol had some flaw in protecting initiator＇ s identity and system requirement, so this paper presented an improved protocol. In the new protocol, used Weil pairing technology, based on hyperelliptic curves, in digital signature authentication, and first authenticated the responder. By those means, the protocol had reduced the system cost and actively protected the initiator＇ s identity. At last, formally analyzed the improved protocol＇ s security property based on applied pi calculus. Analysis result shows that the protocol has a better performance in secure and application.

关 键 词：IKEV2协议 身份保护 WEIL对 应用pi演算 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]