基于授权令牌的宏电路网络接入认证方案  

Access Authentication Scheme for Wide-Sense Circuit Networks Based on Authorization Token

作　　者：王军 陈越 贾洪勇 兰巨龙[2] 

机构地区：[1]数学工程与先进计算国家重点实验室,河南郑州450001 [2]国家数字交换系统工程技术研究中心,河南郑州450002

出　　处：《信息工程大学学报》2014年第5期539-546,共8页Journal of Information Engineering University

基　　金：国家973计划资助项目(2012CB315901)

摘　　要：针对宏电路网络的安全威胁主要来自于外部网络及数据接入的问题,提出一种适用于宏电路网络的接入认证方案。该方案将密钥协商协议和身份批签名验证算法相结合,提出一种可用于对同类数据流的签名进行批量验证的方法;采用密钥协商协议避免了口令攻击、假冒攻击等威胁,在密钥协商协议中采用无证书隐式认证方式解决了传统证书认证中密钥托管和认证过程中隐私信息暴露等问题;采用批量签名验证算法解决了逐个签名验证的计算开销大和验证效率低的问题。仿真实验结果表明,提出的方案在单签名者的批量签名验证中具有较显著的验证效率。An access authentication scheme for WSC networks is proposed based on the fact that the security threats to Wide-Sense Circuit（ WSC） networks comes from outside networks and data access. By combining the key agreement protocol with identity-based batch verification signature,a method for verifying the signatures of data stream in batch is proposed. On the one hand,the key agreement protocol could prevent password attack and impersonation attack. Additionally,the key agreement protocol adopts certificateless implicit authentication instead of traditional certificate authentication in order to solve the problems of key escrow and private information leakage in the authentication process. On the other hand,batch verification signature could provide lower computing cost and higher verifying efficiency than the one-by-one verification of lots of signatures. The simulating experiment shows that the proposed scheme carries out efficient batch verification of single-signer signature.

关 键 词：宏电路 接入认证 密钥协商 身份签名 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]