适合可信计算环境基于口令的双向匿名认证密钥协商协议  

Password-based authenticated key agreement scheme with mutual anonymity for trusted computation

作　　者：朱昶胜[1] 刘鹏辉[1] 王庆荣[2] 曹来成[1] 

机构地区：[1]兰州理工大学计算机与通信学院,兰州730050 [2]兰州交通大学电子与信息工程学院,兰州730070

出　　处：《计算机应用》2011年第7期1862-1867,共6页journal of Computer Applications

基　　金：国家自然科学基金资助项目(60972078);甘肃省自然科学基金资助项目(0809RJZA0190916RJZA015)

摘　　要：如何保持双向匿名性是构建可信计算环境的核心问题之一,针对可信计算环境的特点,提出一个基于口令的匿名认证密钥协商协议,并且在计算性Diffie-Hellman假设和存在强抗碰撞的单向杂凑函数条件下,基于随机预言机模型证明了该协议是安全的。另外,该协议可以有效抵抗字典攻击和资源耗尽型拒绝服务攻击。分析结果表明,该协议能够为密钥协商双方提供隐私保护,而且在执行效率方面明显优于VIET等其他方案。How to keep mutual anonymity between two entities is one of the critical issues for Trusted Computation（TC）.According to the characteristics of TC,an efficient password-based authenticated key exchange scheme was proposed.Adopting threshold cryptography and fuzzy ID set,the scheme achieved mutual anonymity between user and server sharing ID set.On the premise of secure hashing,the analysis and the proving procedure based on the Random Oracle Model（ROM） show this scheme is secure against dictionary attack and resource-depletion DoS（Denial-of-Service） attack under the computational Diffie-Hellman intractability assumption.This scheme effectively preserves the user＇s privacy and server＇s privacy,and compared with other schemes such as VIET et al.＇s scheme,it is more efficient.

关 键 词：密钥协商 可信计算 双向匿名性 口令 拒绝服务攻击 字典攻击 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]