新型可授权的秘密双向认证协议  

New Delegatable Private Mutual Authentication Protocol

作　　者：温雅敏[1] 龚征[2] 

机构地区：[1]广东商学院数学与计算科学学院广州510320 [2]华南师范大学计算机学院广州510631

出　　处：《计算机科学》2013年第6期94-99,123,共7页Computer Science

基　　金：国家自然科学基金项目(61100201,11101096);广东省自然科学基金(S2012040006711,S2012010010376);广东省教育厅育苗工程(LYM11053,LYM11068);广东商学院校级科研项目(11BS41301)资助

摘　　要：秘密双向认证协议(又被称为秘密握手)允许同一组织内群成员间进行匿名的相互认证和通信,但允许群成员把认证能力临时授权给一个可信代理者的功能实现并没有深入研究。为了实现更有效的可授权功能,提出了一个新型可授权的秘密双向认证协议。在该协议中,允许组织外一个被授权且可信的代理者和组织内的成员完成一次成功的秘密认证和通信。基于新的k+1平方根和离散对数表示问题的困难性假设,新型可授权的秘密双向认证协议在随机预言机模型下证明是安全的,并且在计算开销上具备一定的优势。Private mutual authentication （or Secret handshake scheme） was proposed for anonymous bi-directional au- thentication among group members from the same organizations. However, the delegation functionality is not deeply studied which allows a group member to delegate his authentication rights to temporary proxies. For solving this pro- blem more efficiently, a new delegatable private mutual authentication protocol was presented. A temporary proxy can act on behalf of his delegator and accomplish a successful secret handshake with the other member. Based on the diffi- culty assumptions of the k＋ 1 square roots and discrete logarithm representation problems, our proposal is proven se- cure under the random oracle model. Compared with the related schemes, the performance of our new scheme is compet- itive.

关 键 词：授权 隐私保护 双向认证 代理 不可关联性 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]