基于签密的多级安全网络接入认证协议  

A Sign Crypt-based Access Authentication Protocol for Multi-level Security Network

作　　者：陈泽茂[1] 王浩[1] 朱婷婷[1] 

机构地区：[1]海军工程大学信息安全系,武汉430033

出　　处：《武汉理工大学学报》2012年第11期144-148,共5页Journal of Wuhan University of Technology

基　　金：国家"863"计划(2009AA01Z437);国家自然科学基金(61100042)

摘　　要：为增强多级安全网络(Multi-Level Security Network,MLSN)接入认证的性能和安全性,提出了一种新的接入认证协议。它对可信网络连接(Trusted Network Connection)进行增强,实现了双向的平台可信性评估;通过引入了安全属性检查组件,对平台接入中的失泄密隐患进行分析,进一步增强了MLSN接入的安全性;采用签密技术,减少了ML-SN接入认证过程中的公钥运算次数和消息交互轮数。通过对协议的比较和形式化分析,结果表明,所提出协议的计算和通信开销较小、安全性较高。To improve both periormance ano secui,ty integrity measurement feature that Trusted Net- SN）, a new access authentication protocol is proposed. It enhances the work Connect（TNC） provides by implementing bidirectional platform integrity evaluations. Is introduces a security at tribute checking component to analyze potential sensitive information leakage, thus further improves the access security in MLSN. By employing sign-crypto, it reduces the public key computation overhead and the number of messages exchanged during access authentication＂ Security of the protocol is formally analyzed. Comparisons with similar protocols show that the protocol incurs less performance overhead in both computation and communication.

关 键 词：多级安全网络 可信网络连接 接入认证 签密 安全属性检查 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]