一种新的基于身份的多信任域认证模型研究  

Research of a New Identity-Based Authentication Model for Multi-Domain

作　　者：杨斌[1] 陈国庆[1] 孙永红[1] 

机构地区：[1]73672部队

出　　处：《计算机安全》2010年第8期15-18,共4页Network & Computer Security

摘　　要：为解决基于身份的多信任域跨域认证问题,在分析了IBC和PKI认证框架特点的基础上,提出了一种新的基于身份的多信任域认证模型。该模型综合利用IBC和PKI的优点,实现了不同参数的IBC信任域的跨域认证问题,并通过BAN逻辑对本文设计的跨域认证协议进行了详细的分析和证明。分析结果表明,该模型能够实现跨域认证需求,跨域认证协议是安全有效的。To solve the problems of authentication for crossing identity-based domains,a new identity-based authentication model for multi-domain is proposed based analyzing the characteristics of IBC and PKI authentication frame-works.Combining the strongpoint of IBC and PKI,new model solves the prombles of authentication for cross-domain when each domain has different parameter. In the end,the cross-domain authentication protocol in this paper is analyzed detailedly by BAN logic. It is showed that the proposed model can achieve the requirements for cross-domain authentication,and the protocol is secure and effective.

关 键 词：基于身份 公钥基础设施 跨域认证 协议 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术]