基于身份认证的Ad Hoc密钥协商方案  

Session key agreement scheme for Ad Hoc network based on identity authentication

作　　者：施荣华[1] 樊翔宇[1] 

机构地区：[1]中南大学信息科学与工程学院,湖南长沙410083

出　　处：《中南大学学报（自然科学版）》2010年第6期2236-2239,共4页Journal of Central South University:Science and Technology

基　　金：国家自然科学基金资助项目(60773013);湖南省自然科学基金资助项目(07JJ5078)

摘　　要：为了在Ad Hoc网络中建立安全可靠的会话密钥,提出一种新的适合于Ad Hoc网络的基于身份认证和门限机制的会话密钥协商方案。首先,提出基于身份的双向认证方案,在保证系统私钥安全的前提下,将系统私钥与哈希函数结合,既保证了节点身份的真实性,又避免了采用公钥证书引起的复杂管理问题,同时,该方案具有前向保密性与抗中间人攻击的性能;其次,采用门限机制,通过更新密钥份额来加强系统私钥的安全性避免了Ad Hoc网络的单点失效问题;最后,从正确性、安全性和性能3方面进行分析与研究。研究结果表明:该方案较节约网络资源,具有较高的安全性与可靠性。To build a safe and credible session key,a new session key agreement scheme based on identity authentication and combined with enter restriction scheme was proposed.Firstly,the improved alternation identity-based authentication that combines with system private key and hash function was proposed for the safety of system private key.It guarantees node to communicate with the right one and avoids complicated management problem that may be caused by public key certificate.At the same time,the scheme has forward secrecy and anti-attack performance of intermediaries.Secondly,enter restriction scheme,which updates key share to strengthen the security of private key,and avoids single node＇s invalidation in Ad Hoc network.Finally,the correctness,security and performance were analyzed.The result shows that the scheme saves network resources and has high security and reliability.

关 键 词：ADHOC网络 密钥协商 基于身份的双向认证 门限方案 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]