基于身份的密钥协商协议对Kerberos的改进  

Improving Kerberos system based on the key agreement protocol of identity based cryptography

作　　者：邬春学[1] 刘柳生[1] 

机构地区：[1]上海理工大学光电信息与计算机工程学院,上海200093

出　　处：《上海理工大学学报》2010年第4期365-368,共4页Journal of University of Shanghai For Science and Technology

基　　金：国家自然科学基金资助项目(60573142;60874002);湖北省自然科学基金资助项目(2004ABA076)

摘　　要：详细论述了Kerberos协议的认证过程及主要缺陷,介绍了基于身份的公钥密码学理论,提出了基于身份的可认证密钥协商协议,在此基础上对Kerberos协议进行改进,使其具有更高的安全性.通过详细的安全性能分析,该方案使系统更安全,更加容易管理和维护.The Kerberos protocol was discussed in detail,the identity based cryptography was introduced and then an authenticated key agreement protocol was proposed,which can improve the Kerberos system.The analysis of security shows that this scheme makes the system more secure and the maintenance becomes easier.

关 键 词：KERBEROS协议 认证 基于身份 密钥协商 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]