基于动态ID的多服务器认证密钥协商方案  

Negotiation Scheme of Multi-Server Authenticating Key Based on Dynamic ID

作　　者：昝亚洲 刘文芬[1,2] 魏江宏[1,2] 

机构地区：[1]信息工程大学 [2]数学工程与先进计算国家重点实验室 [3]92187部队

出　　处：《信息工程大学学报》2014年第6期654-663,共10页Journal of Information Engineering University

基　　金：国家973计划资助项目(2012CB315905;2012CB315901)

摘　　要：讨论了Chuang等人最近提出的一个基于可信计算的匿名多服务器认证密钥协商方案,指出其不能抵抗内部攻击,且在生物验证上存在Hash函数问题。通过引入椭圆曲线公钥密码和对称加密算法,提出了一个新方案并对其进行分析。分析结果表明,新方案弥补了原方案的不足,且具有较高的效率。最后,用一种改进的BAN逻辑证明了新方案满足密钥协商的正确性、密钥机密性和强认证性。Recently Chuang et al. proposed an anonymous multi-server authenticating key negotia- tion scheme based on trust computing using smart cards and biometrics. However, it is found that their scheme is vulnerable to insider attacks, and it has the Hash function problem in the biometric verification. Therefore, this paper presents an improved scheme by introducing the elliptic curve key cryptography and symmetrical encryption. Security and performance analysis indicate that the new scheme eliminates the defects of Chuang et al. ＇ s scheme while keeping the high performance. Be- sides, the security of the improved scheme is proved by using the formal analysis method of an im- proved BAN logic. The results show that the improved scheme can ensure the correctness of key a- greement, key confidentiality and strong authentication.

关 键 词：身份认证 动态ID 多服务器 智能卡 椭圆曲线密码 BAN逻辑 

分 类 号：TN918.1[电子电信—通信与信息系统]