基于身份的高效层次认证密钥协商协议  

Efficient Hierarchical Identity-based Authenticated Key Agreement Protocol

作　　者：苏航[1] 刘建伟[1] 刘巍然[1] 李妍[2] 

机构地区：[1]北京航空航天大学电子信息工程学院,北京100191 [2]航天恒星科技有限公司,北京100086

出　　处：《武汉大学学报（理学版）》2016年第3期249-254,共6页Journal of Wuhan University:Natural Science Edition

基　　金：国家自然科学基金项目(61272501);国家重点基础研究发展计划(973)项目(2012CB315905);中央高校基本科研业务费专项资金项目(YWF-15-GJSYS-059);中国航天科技集团公司卫星应用研究院创新基金项目(2014-CXJJ-TX-10)

摘　　要：现有的基于身份的认证密钥协商协议大多工作于单一私钥生成中心(Public Key Generator,PKG)环境下.提出了一种新的基于身份的层次认证密钥协商协议.该协议中,根PKG为多层的域PKG验证身份并生成私钥,域PKG为用户验证身份并生成私钥.多层PKG有效防止了单点失效问题,减轻了PKG的运行压力,提高了系统的承载能力.与已有协议相比,本文协议的计算开销与双方用户所处层级成线性关系,不含双线性对运算,具有更高的效率.协议的安全性基于计算性Diffie-Hellman困难假设,满足密钥协商协议所需的基本安全需求,具有PKG前向安全等安全性质.Most of the existing identity-based authenticated key agreement protocols are based on a single private key generator （PKG） environment. In this paper, we propose a new hierarchical identity-based authenticated key agreement protocol. In our protocol, a root PKG authenticates the identity and generates a private key for lower-level PKGs which authenticate the identity and generate a private key for users. Hierarchy PKGs could prevent a single point of failure problem, reduce the PKG^s operation pressure, and increase the carrying capacity of the system. Com- pared with the existing protocols, the computational time of our protocol has a linear relationship with user＇s hierarchy level, and is more efficient without bilinear pairings computation. The security of our protocol, based on the computa- tional Diffie-Hellman assumption, meets the security demand of basic security authentication key agreement protocol, and has the security properties such as PKG forward security.

关 键 词：基于身份 层次认证密钥协商协议 计算性Diffie-Hellman困难假设 PKG前向安全 

分 类 号：TN918.1[电子电信—通信与信息系统]