基于身份的域间认证及密钥协商协议  

Identity-based inter-domain authentication and key agreement protocol

作　　者：庞辽军[1,2] 徐银雨[2] 裴庆祺[3] 李慧贤[4] 王育民[2] 

机构地区：[1]西安电子科技大学生命科学技术学院,陕西西安710071 [2]西安电子科技大学计算网络与信息安全教育部重点实验室,陕西西安710071 [3]西安电子科技大学通信工程学院,陕西西安710071 [4]西北工业大学计算机学院,陕西西安710072

出　　处：《系统工程与电子技术》2012年第6期1258-1265,共8页Systems Engineering and Electronics

基　　金：国家自然科学基金(60803151;60803150;61103178);NSFC-广东联合基金重点项目(U0835004);高等学校博士学科点专项科研基金新教师基金(20096102120045)资助课题

摘　　要：基于Shamir的秘密共享思想,提出了一种基于身份的域间认证及密钥协商协议。该协议要求域内节点共同参与共享密钥的生成,解决了现有的两方密钥协商方法用于域间认证,及密钥协商时不能保障代表节点可靠性和普通节点参与度的问题。协议的正确性和安全性分析说明,该协议不仅满足密钥协商的基本安全属性,而且还满足数据保密性、数据完整性、抵抗代表节点假冒和欺骗等安全性要求。与使用现有的两方密钥协商协议进行域间认证及密钥协商相比较,本协议具有更低的通信量和计算量,同时,提高了域内普通节点在密钥协商过程中的参与度。Derived from Shamir＇s secret sharing idea, an identity-based rater-domain authentication and Key agreement protocol is proposed. The protocol requires all nodes of a domain to participate the generation of the shared key, thus two knotty problems that the reliability of the representative nodes of the domains cannot he guaranteed and the efficiency of key agreement is very low are solved when using the existing two-party key agreement protocols for inter-domain authentication and key agreement. The correctness and security analyses show that this protocol meets not only the basic security properties of the key agreement, hut also data confiden- tiality, data integrity, resistance to impersonating the representative nodes and so on. Compared with the exist- ing two-party key agreement protocols in inter-domain key agreement, the proposed protocol is less in communication and computation, and at the same time, it improves the participation of the common nodes of the domains in the process of key agreement.

关 键 词：域间认证 密钥协商 共享密钥 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]