构建无证书的两方认证密钥协商协议  

Constructing certificateless-based two-party authenticated key agreement protocol

作　　者：侯孟波[1] 徐秋亮[1] 蒋瀚[1] 

机构地区：[1]山东大学计算机科学与技术学院

出　　处：《计算机工程与应用》2010年第8期1-4,28,共5页Computer Engineering and Applications

基　　金：国家自然科学基金Grant No.60873232;山东省自然科学基金Grant No.Y2007G37~~

摘　　要：基于无证书的认证密钥协商方案相比基于PKI的方案具有身份管理的简单性,同时相比基于身份的方案具有无密钥托管性。基于可证安全的无证书加密方案提出了一个两方认证密钥协商方案.通过与其他方案在安全性和有效性方面的比较,该方案满足更多的安全属性要求,如完美前向安全性,PKG前向安全性,已知会话相关临时秘密信息安全性和无密钥托管等安全特性,同时具有良好的计算有效性。The certificateless-based authenticated key agreement protocols have the advantages of simplicity of managing identities compared to the PKI-based schemes,as well as avoiding the key escrow issues inherited in the identity-based schemes. This paper proposes a two-party certificateless-based authenticated key agreement scheme based on a provably secure certificateless-based public key encryption scheme.The comparisons with other comparable schemes in security and efficiency show that,the new scheme achieves more of the desired security attributes,such as perfect forward secrecy,PKG forward secrecy, known session-specific temporary information secrecy and key escrowless.Meanwhile it keeps the nice computational efficiency.

关 键 词：认证密钥协商 无证书加密 完美前向安全 私钥生成中心(PKG)前向安全 密钥托管 

分 类 号：TN918.1[电子电信—通信与信息系统]