UC安全的双向口令认证密钥协商协议  

Universally Composable Secure Mutual Password-authenticated Key Exchange Protocol

作　　者：刘松 果乃福 谢帆 张丽 李淼 

机构地区：[1]解放军65012部队

出　　处：《计算机工程》2014年第2期140-143,147,共5页Computer Engineering

摘　　要：针对多数口令密钥协商(PAKE)协议不具备双向认证功能的问题,基于通用可组合(UC)模型,提出一种UC安全的双向口令认证密钥协商(MPAKE)协议。定义具有双向认证功能的PAKE协议理想函数,描述实体之间的双向认证关系,并利用联合状态UC模型构造实现该理想函数的协议,使协议实体之间可以使用共享参数。该协议基于口令实现了双向认证,并能够协商出会话密钥。通过构造仿真器及其执行的操作分析MPAKE的不可区分性,从而证明该协议是UC安全的,并且结构简单,可保证在任意多方环境中并行运行时的安全。To solve the problem that mutual authentication is lacked in many existing Password-authenticated Key Exchange（PAKE） protocol, this paper proposes an Universally Composable（UC） secure Mutual Password-authenticated Key Exchange（MPAKE） protocol. An ideal function of PAKE protocol with mutual authentication is defined, the mutual authentication between entities is described explicitly in the defined function, and a new protocol which achieves the ideal function is constructed based on the Joint state UC（JUC） model. So the shared parameters can be used to facilitate the protocol between entities. The new protocol can realize mutual authentication based on password and a session key can also be negotiated. The emulator and its operations are constructed, and its indistinguishability is analyzed. Thus the constructed new PAKE protocol with mutual authentication is proved to be UC secure and simple structure, and the security of protocol is realized when running in parallel in any multi-party environment.

关 键 词：口令认证密钥协商协议 双向认证 通用可组合安全 仿真器 认证协议 安全性证明 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]