对Tasi群密钥协商协议的改进及安全分析  

Improvement and security analysis on Tasi's group key agreement

作　　者：霍丽娟[1] 李朝阳[2] 孙垒[3] 

机构地区：[1]河南理工大学计算机科学与技术学院,河南焦作454003 [2]郑州轻工业学院数学与信息科学学院,河南郑州450002 [3]河南理工大学数学与信息科学学院,河南焦作454003

出　　处：《郑州轻工业学院学报（自然科学版）》2015年第3期94-97,共4页Journal of Zhengzhou University of Light Industry:Natural Science

基　　金：国家自然科学基金项目(61272525);河南省教育厅科学技术研究项目(14A110003)

摘　　要：针对J.L.Tsai等人提出的移动环境下群密钥协商协议存在的安全缺陷,利用数字签名技术,对其进行了改进:在数字签名中加入序列号,用以标记签名和将要生成的群密钥的次序,并将序列号作为数字签名公开验证信息之一,从而实现对移动用户或者具有较强计算能力的节点所发送消息的及时验证.由安全分析可知,改进后的协议不仅具有原来的安全特性,而且可以抵抗重放攻击或冒充攻击.Aimed at the security defect of group key agreement protocol for mobile environment proposed by J. L. Tsai,the protocol was improved by using the digital signature technology. That is,some serial numbers were inserted in the digital signatures so as to identify the signatures and the order of the group keys to be generated,and the serial numbers were used as part of public information to verify the digital signatures. So the freshness of messages sent by the mobile users or the powerful node could be checked. According to the security analysis,it is found that the improved protocol not only had the old security properties,but also could resist against impersonation attack or forgery attack.

关 键 词：群密钥协商协议 双线性对 移动通信 数字签名 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]