基于双线性对的双向认证密钥交换协议  

Two-party authenticated key exchange protocol based on bilinear pairings

作　　者：黄朝阳[1] 郭健 汤碧玉[2] 徐颖 林扬武 

机构地区：[1]厦门海洋学院信息技术系,福建厦门361100 [2]厦门大学信息科学与技术学院,福建厦门361005

出　　处：《计算机工程与设计》2014年第8期2671-2674,2684,共5页Computer Engineering and Design

基　　金：福建省中青年教师教育科研基金项目(JA13409);国家科技部火炬计划基金项目(2011GH541289)

摘　　要：为有效提高远程身份认证协议的性能,将椭圆曲线、双线性对及杂凑函数与生物特征、智能卡技术相结合,提出一种安全高效的双向认证密钥交换协议。协议的安全性建立在双线性对各种难题的基础上;通过设计认证双方仅需两次握手来实现双向认证,协议通信代价低;通过数学公式推导和已知攻击的形式化推演方法验证协议能有效抵御各种攻击;通过引入随机数和时间戳完成一次性安全会话密钥的协商。该协议避免使用公钥加解密运算,计算复杂度较小。To improve the proformance of remote identity authentication protocol effcetively, a secure and effiective two-party authenticated key exchange protocol was proposed, which combined with multiple security technologies including elliptic curve, hilinear pairings, hash function, biologic character and smart card. The safety of this protocol was established based on difficult problems of bilinear pairings. The communication cost of the protocol was low because the two parties of authentication only needed online message transmissions for twice. The safety of new protocol was demonstrated by using mathematical derivation and the formal deduction of known attacks. A onetime security key was generated by using random number and timestamp. Compared to other public-key cryptosystems, the protocol has lower computation cost.

关 键 词：双线性对 椭圆曲线 指纹 智能卡 杂凑函数 随机数 口令认证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]