基于PKI机制优化的无线网络认证协议  

Wireless authentication protocol based on PKI optimization

作　　者：陈泽茂[1] 廖巍[1] 谌双双[1] 王浩[1] 

机构地区：[1]海军工程大学信息安全系,湖北武汉430033

出　　处：《计算机工程与设计》2012年第9期3297-3300,共4页Computer Engineering and Design

基　　金：中国博士后特别基金项目(201003757)

摘　　要：为了提高无线网络环境中PKI认证的效率,引入可信证书验证代理(TCVP)和证书有效性凭据(CVT)等概念,对PKI认证机制进行了优化,并在此基础上设计了无线认证协议。该协议中,TCVP基于PKI机制对无线网络节点(WN)进行身份认证并为其签发CVT。WN仅需出示CVT即可证明其身份。该协议不但避免了在移动无线终端中执行公钥证书的在线验证操作,还减少了认证协议的消息数。与SSL和WTLS的对比分析结果表明,该协议的传输开销和计算开销更小。To improve the efficiency of PKI authentication in wireless network environment,new concepts of trusted certificate proxy（TCVP） and certificate validity ticket（CVT） are introduced and an optimized scheme of PKI authentication is proposed.Then,a wireless authentication protocol named TBPKI is proposed.In TBPKI,TCVP authenticates a wireless network node（WN） by employing PKI and then generate a CVT for it.Afterwards,WN can testify itself by providing its CVT.TBPKI not only avoids the performance penalty in mobile wireless terminal suffered from online certification validation,but also reduces the number of messages exchanged.Compared with the SSL and WTLS protocols,TBPKI causes less computation and transportation overhead.

关 键 词：无线安全 安全协议 公钥基础设施 身份认证 可信代理 密钥协商 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]