基于Diffie-Hellman算法的身份认证模型研究  

Diffie-Hellman Algorithm-Based Identity Authentication Model Research

作　　者：黄俊[1] 王行恒[2] 

机构地区：[1]公安部第三研究所信息网络安全公安部重点实验室,上海201204 [2]华东师范大学计算中心,上海200062

出　　处：《计算机技术与发展》2011年第5期143-146,154,共5页Computer Technology and Development

基　　金：国家863计划(2008AA01E412);发改办高技([2008]1736号)

摘　　要：随着Web应用的安全问题的突出,Web应用系统的身份认证越来越重要,一种通用的安全的身份认证模型的建立很有必要。提出了一种安全的、可互操作的、实用的身份认证模型,它基于Diffie-Hellman密钥交换算法,在认证的过程中用共享密钥加密防窃听,用随机数防重放攻击,用消息认证码防篡改,保证了应用服务器与认证服务器之间的通信安全。文章详细阐述了模型设计细节,通过对其安全性进行分析,认为该模型具有较高安全性,并计划将该模型用于公安eID系统中。As the security problems of the Web applications become more prominent, Web application authentication systems are more and more important, and it is necessary to build an available and security identity authentication model. Present a＇kind of safe, interoperable, practical identity authentication model, which is based on Diffie-Hellman key exchange algorithm. The model uses sharing encryp- tion to prevent eavesdropping, uses random against replay attack, and uses MAC against tampering, which ensure the communication se- curity between the application server and the authentication server. Also expound the details of the model design and analyzes its safety Finally, believe that the model is of high security, and plan to use it in the eID system.

关 键 词：DIFFIE-HELLMAN算法 身份认证 消息认证码 信息安全 信息交换 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]