基于身份的多服务器认证密钥协商方案  

Identity-based smart card remote authenticated key agreement protocol for multi-servers

作　　者：李曦[1] 李传锋[2] 朱巍[3] 何明星[1] 

机构地区：[1]西华大学数学与计算机学院,四川成都610039 [2]洛阳理工学院计算机与信息工程系,河南洛阳471023 [3]中国电子科技集团公司第29研究所,四川成都610036

出　　处：《华中科技大学学报（自然科学版）》2011年第1期36-40,共5页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金资助项目(60773035);四川省教育厅青年基金资助项目(10ZB082);西华大学校重点科研基金资助项目(Z1022615)

摘　　要：将基于身份的密码体制与远程多服务器密钥协商相结合,提出一种基于身份的远程多服务器密钥协商方案.用户注册时由私钥生成中心颁发私钥并安全存放于智能卡中.用户登录服务器前,双方采用基于身份的双线性配对计算进行双向身份认证,并协商生成会话密钥.服务器端无须保存口令表,用户端无须建立数据表存储相关登录信息,无须在终端能离线更改登录口令.该方案减少了密钥协商的通信开销、计算开销以及存储开销,在标准BR安全模型下该方案被证明是安全的.An efficient remote authenticated key agreement scheme with multi-servers using identity-based cryptography was proposed.The private key issued by the key generation center stores in the smart card security.The mutual authentication based bilinear will be achieved as well as a session key generation before user′s login.In the scheme neither servers nor users preserve the password table.Users do not need register to multi-servers when they login a new server.The proposed scheme provides the explicit key authentication between users and servers.Furthermore,it reduces the communication costs,computation and storage consuming.Additionally,the scheme has been proved secure by the standard BR security model of authenticated key agreement protocols.

关 键 词：公钥密码 基于身份的密码体制 认证密钥协商 远程多服务器 BR安全模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]