一种用于移动通信的匿名认证方案  

Anonymous authentication scheme for mobile communication

作　　者：刘金业[1] 谷利泽[1] 罗守山[1] 杨义先[1] 崔军[2] 吴兴耀 

机构地区：[1]北京邮电大学网络与交换技术国家重点实验室信息安全中心,北京100876 [2]天津市国瑞数码安全系统有限公司北京研发中心,北京100088 [3]中国移动通信集团设计院有限公司,北京100088

出　　处：《西安电子科技大学学报》2011年第1期176-183,共8页Journal of Xidian University

基　　金：国家863计划资助项目(2007AA01Z430);国家自然科学基金资助项目(60821001);国家重大科技专项资助项目(2009ZX03004-003-03)

摘　　要：为了使移动网络向用户提供匿名服务,保证用户的身份和行踪等信息的机密性,提出了一种匿名认证方案,不仅解决了用户在漫游网中的匿名问题,而且也解决了在归属网中难以实现的匿名服务问题.本方案不仅通信量小,而且也无需每次更换密钥.本方案以知识证明为基础,采用直接匿名认证协议理论并结合加密传输和签名验证来实现.理论和分析实验表明,用户漫游时无需到家乡代理验证身份,且在归属网中无需映射出自己的真实身份,有效地实现了全网匿名.In order to enable the mobile network to provide anonymity services and ensure the confidentiality of the user＇s identity, whereabouts and other information, we put up an anonymous authentication scheme, which solves the problem of user＇s anonymity not only in roaming network, but also in adscription network. The scheme has not only a small amount of communication, hut also does not need to change the key every time. The scheme is based on the knowledge proof, and uses the direct anonymous attestation protocol theory together with encrypting transfer and signature validation for its implementation. Theoretical analysis and experimental results demonstrate that users do not need to go to the home agent to authenticate the user＇s identity in the roaming network, and that there is no need to map out its true identity in the adscription network. It implements user＇s anonymity in the whole network effectively.

关 键 词：认证 匿名 移动计算 隐私保护 

分 类 号：TP393.01[自动化与计算机技术—计算机应用技术]