SIP协议量子身份认证与密钥协商方案  

Quantum authentication and key agreement scheme for SIP protocol

作　　者：杨光[1,2] 聂敏[1] 杨武军[1] 

机构地区：[1]西安邮电大学通信与信息工程学院,西安710121 [2]西北工业大学电子信息学院通信工程系,西安710072

出　　处：《四川大学学报（自然科学版）》2016年第1期87-92,共6页Journal of Sichuan University(Natural Science Edition)

基　　金：国家自然科学基金(61172071;61201194);陕西省自然科学基础研究计划(2014JQ8318);陕西省国际合作与交流计划项目(2015KW-013);陕西省工业攻关项目(2014K09-14)

摘　　要：针对现有SIP协议安全方案无法检测窃听、以及经典密码体制面临量子计算攻击时的脆弱性问题,提出了一种将量子用户身份认证及密钥协商与SIP协议结合的方案。SIP服务器制备三粒子W态并将其中两个粒子分发给SIP用户,首先对随机插入的粒子进行测量以检测窃听,然后通过量子操作与测量验证用户身份;密钥协商阶段,三方不需制备与分发新的W态,仍基于持有的W态进行随机测量,SIP用户根据有效测量结果生成初始会话密钥.性能分析表明本方案能够对抗伪装攻击与窃听攻击,有效提高SIP协议安全性。To overcome the shortcomings of current SIP safety scheme, such as the incapability to detect the wiretap and the vulnerability of the classical key system in case of quantum computation attack, this paper proposes a novel user authentication and key agreement scheme that combined quantum safe communication methods and SIP protocol. The SIP server prepared the three particle W states and distributed two of them to the SIP users. The random inserted particles were measured first to detect the wiretap ; then the rest of the W states were operated and measured to authenticate the user. After that, every particle of the W states was measured randomly and the two SIP users got the initial conversation key according to the results of the effective measurements. The performance analysis shows our scheme is capable of resisting the impersonation attack and wiretap attack, thus can increase the safety of SIP protocol effectually.

关 键 词：量子通信 会话启动协议 身份认证 密钥协商 

分 类 号：TN918.91[电子电信—通信与信息系统]