高效的基于身份的认证密钥协商协议  

Efficient ID-based authenticated key agreement protocol

作　　者：高海英[1] 

机构地区：[1]信息工程大学电子技术学院,郑州450004

出　　处：《计算机应用》2012年第1期35-37,55,共4页journal of Computer Applications

基　　金：国家自然科学基金资助项目(90604022)

摘　　要：王圣宝等(王圣宝,曹珍富,董晓蕾.标准模型下可证安全的身份基认证密钥协商协议.计算机学报,2007,30(10):1842-1854)提出的标准模型下可证明安全的基于身份的认证密钥协商协议不具有私钥产生中心(PKG)前向安全性。针对该安全缺陷,提出了一种新的基于身份的认证密钥协商协议,协议中给出了一种利用用户私钥和临时秘密信息联合计算共享秘密的方法,并在标准模型下证明了协议的安全性。与已有协议相比,新协议具有较高的执行效率。同时提出了一种PKG与用户共同协商私钥的方法,即用户的私钥由用户产生的部分秘密信息以及PKG的系统主密钥共同生成,从而有效解决了基于身份的认证密钥协商协议的PKG前向安全性问题。Wang et al.（WANG SHENG-BAO,CAO ZHEN-FU,DONG XIAO-LEI.Provably secure identity-based authenticated key agreement protocols in the standard model.Chinese Journal of Computers,2007,30（10）：1842-1854） proposed an ID-based Authenticated Key Agreement（IDAKA） protocol which was proved secure under standard model but without attribute of Private Key Generator（PKG） forward security.In order to remedy the flaw,a new protocol was introduced in which the shared secret message was calculated by the private key and temporary secret information of users of the protocol,and its security was also proved in standard model.Compared with known protocols,the new protocol is more efficient.Additionally,a method of jointly generating private key by PKG and user was proposed.The private key of user was calculated by the main secret key of system and secret information provided by user.It effectively solves the problem of PKG forward security of ID-based authenticated key agreement protocol.

关 键 词：基于身份的认证密钥协商协议 双线性对 钥产生中心前向安全性 标准模型 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构] TP391[自动化与计算机技术—计算机科学与技术]