改进的跨域口令认证密钥交换协议  

Improved Cross-realm C2C-PAKE Protocol

作　　者：刘卫红[1] 王立斌[1] 马昌社[1] 

机构地区：[1]华南师范大学计算机学院,广州510631

出　　处：《计算机工程》2010年第19期162-164,共3页Computer Engineering

基　　金：国家自然科学基金资助项目"高效可证明紧致安全的数字签名技术研究"(60703094)

摘　　要：描述一个跨域口令认证密钥交换协议,在其基础上对跨域C2C-PAKE协议的安全模型进行改进。通过引入公钥密码体制,结合离散对数高可靠等特点,提出改进的跨域口令认证密钥交换协议。该协议步骤简单,具有语义安全性、密钥保密性,实现了服务器与用户之间的双向认证,能对抗不可检测在线字典攻击等常见攻击。安全性分析表明该协议是安全有效的。This paper describes a cross-realm C2C-PAKE protocol.Based on it,it improves the formal model and proposes an improved protocol which is introduced public key mechanism to system security and combined with the high reliability of discrete logarithm.The protocol is simple and is analyzed with semantic security and key confidentiality.It also achieves the mutual authentication between server and client,and it can resist common attacks such as undetected online dictionary attack.Security analysis shows it is safe and effective.

关 键 词：跨域 口令认证 密钥交换 安全协议 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]