基于无双线性对的无证书隐式认证的Kerberos协议改进  

Improved Kerberos Protocol Based on Certificateless Implicit Authentication without Bilinear Pairing

作　　者：刘倩[1] 张愉[2] 范安东[1] 

机构地区：[1]成都理工大学管理科学学院,成都610059 [2]成都理工大学旅游与城乡规划学院,成都610059

出　　处：《四川理工学院学报（自然科学版）》2014年第2期59-63,共5页Journal of Sichuan University of Science & Engineering(Natural Science Edition)

基　　金：四川省应用基础计划项目(2012JY0033)

摘　　要：针对Kerberos认证协议存在的密钥托管,口令攻击和重放攻击等缺陷,将隐式认证与无证书密钥协商协议结合,提出了一种无双线性对的无证书隐式认证的Kerberos改进协议,避免了Kerberos协议中第三方对信息的无举证窃听,有效克服了中间人攻击。新协议在增强模型下是可证明安全的,并且仅需9次椭圆曲线上的点乘运算和2次哈希运算,具有较高的计算效率。In order to solve the problems of the key escrow, password-based attack and replay attack in Kerberos authentication protocol, combining implicit authentication and certificateless key agreement protocol, an improved Kerberos protocol based on certificateless implicit authentication without bilinear pairing is proposed. In the improved protocol, the third party＇s interception without solid evidence can be avoided, and the attacks of man-in-the-middle can also be overcome efficiently. The new protocol is proved to be secure in the improved model, and requires only nine times point multiplication on the elliptic curve and two times hash operation, so the improved scheme has better computational efficiency.

关 键 词：无证书公钥密码体制 隐式认证 KERBEROS协议 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]