基于身份的认证密钥协商协议的改进  

IMPROVEMENT OF ID-BASED AUTHENTICATED KEY AGREEMENT PROTOCOL

作　　者：陈虹[1] 徐嘉鸿[1] 肖振久[2] 

机构地区：[1]辽宁工程技术大学软件学院,辽宁葫芦岛125105 [2]中国传媒大学计算机学院,北京100024

出　　处：《计算机应用与软件》2016年第2期284-289,共6页Computer Applications and Software

基　　金：国家自然科学基金项目(61103199)

摘　　要：针对已有的基于身份的认证密钥协商协议存在的安全问题,提出一种改进的基于身份的认证密钥协商协议。该协议采用双线性对运算方法,用户双方的临时和长期私钥结合进行最终会话密钥的计算,解决了原协议中存在的PKG前向安全性问题、单一依赖临时或长期私钥而存在的问题和已知临时会话密钥泄漏攻击的问题。在保证改进协议正确基础上,对协议的安全属性及协议性能进行了分析。采用SVO逻辑对协议进行形式化分析,验证了改进协议的认证性和安全性。结果表明,改进的协议满足基于身份认证密钥协商协议的所有安全性要求,与已有基于身份的认证密钥协商协议相比具有更好的安全属性及计算效率。To solve the security problem in existing ID-based authenticated key agreement protocol, ir~ this paper we propose an improved ID-based authenticated key agreement protocol. The protocol uses bilinear pairing operation method, combines the temporary and long-term private keys of both users sides to calculate the final session key, and solves the problem of PKG-forward security in previous protocol, the problem caused by singly depending on the temporary or long-term private keys, and the problem of known temporary session key leakage attacks. Based on ensuring the correctness of the improved protocol, we analyse the security attribute and the performance of the improved protocol, and carry out formal analysis on the protocol with SVO logic, as well as verify the authentication property and security of the improved protocol. Results show that it satisfies all the security requirements of an ID-based authenticated key agreement protocol. Comparing with other existing similar protocols, it has better safety attribute and higher computational efficiency.

关 键 词：基于身份的认证 密钥协商 双线性对SVO逻辑 形式化验证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]