改进的可信网络连接机制  

Improved mechanism for trusted network connect

作　　者：周勇[1] 

机构地区：[1]西北政法大学信息网络中心,西安710063

出　　处：《计算机应用》2014年第A02期99-101,共3页journal of Computer Applications

摘　　要：针对传统可信网络中存在会话密钥协商过程易受中间人攻击的不足,提出改进的可信网络连接机制。该机制基于椭圆曲线Diffie-Hellman(ECDH)算法实现会话密钥的安全协商,用户与节点使用私钥和随机数完成会话密钥的计算。分析表明改进的密钥协商协议具有抗中间人攻击、高效性等特点,会话密钥具有前向安全性及较强的新鲜性和保密性。The traditional trusted networks are open to man-in-the-middle attacks in negotiation process of session key. In allusion to the above deficiencies, this paper improved the negotiation process of session key based on the ECDH （ Elliptic Curve key agreement scheme - Diffie-Hellman version） using private key and random number. Thorough analysis shows that the key agreement protocol can fight back the man-in-the-middle attacks, have high efficiency and other characteristics. The session key has the forward security, freshness and secrecy.

关 键 词：可信网络 可信网络连接 中间人攻击 安全密钥交换协议 可信平台模块 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]