基于零知识证明的跨域认证方案  

Cross-domain Authentication Scheme Based on Zero Knowledge Proof

作　　者：李铮[1] 陈泽茂[1] 秦艳琳[1] 朱婷婷[1] 

机构地区：[1]海军工程大学信息安全系,武汉430033

出　　处：《计算机与数字工程》2014年第3期446-449,共4页Computer & Digital Engineering

基　　金：湖北省自然科学基金(编号:2012FFC3201)资助

摘　　要：针对基于PKI认证的有线网络与基于IBE认证的无线网络混合组网时,因安全策略、密码体制的不同而导致节点间身份认证困难的问题,设计了一种基于零知识证明的跨PKI/IBE域的身份认证方案,在两个异构信任域之间设置一个零知识证明承诺值代理节点,在此基础上,设计了一个异构信任域身份认证协议,实现域间实体的身份认证,并分析了该协议的正确性、安全性和效率,结果表明其可行有效。In a hybrid network system which combines a wired network adopting PKI authentication and a wireless net- work adopting IBE authentication, it is difficult to authenticate other nodes in view of the different security polices and crypt- osystem. To solve this problem, a cross-domaia authentication scheme based on zero knowledge proof is proposed. An agen cy node is settled between the two heterogeneous trustworthy domains to certificate nodes＇ commitments in the zero knowl edge proof. Then a authentication protocol between heterogeneous trustworthy domains is designed to realize the authentica- tion between nodes in different domains, and the correctness, security and efficiency of the protocol are analyzed. The results show that the proposed protocol is feasible and effective.

关 键 词：零知识证明 身份认证 代理节点 异构信任域 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]