一种无线切换认证协议的性能改进  

Performance improvement of wireless handover authentication protocol

作　　者：曾永斌 广晖[2] 李光松[1] Zeng Yongbin;Guang Hui;Li Guangsong(State Key Laboratory of Mathematical Engineering&Advanced Computing,Information Engineering University,Zhengzhou 450001,China;College of Physical Education,Zhengzhou University,Zhengzhou 450044,China)

机构地区：[1]信息工程大学数学工程与先进计算国家重点实验室,郑州450001 [2]郑州大学体育学院,郑州450044

出　　处：《计算机应用研究》2018年第3期901-904,910,共5页Application Research of Computers

基　　金：国家重点研发计划资助项目(2016YFB0800101;2016YFB0800100)

摘　　要：切换认证协议是确保移动节点在无线网络中多个接入点之间进行快速安全切换的关键,在设计切换认证协议时,必须充分考虑移动节点计算、存储能力低以及电池容量小等特点。针对无线局域网的切换认证协议Hash Hand双线性对运算消耗资源大的缺陷,提出了一种新的快速切换认证协议。该协议不使用对运算,仅使用加法群的点乘运算替代,提高了协议的效率,并且具有用户匿名性、不可追踪性和有条件的隐私保护性。用户与认证服务器满足互认证性,能够安全地协商会话密钥并且周期性地更新。该协议能有效地抵制重放攻击和拒绝服务攻击。The handover authentication protocol is crucial to ensure the mobile node handover between multiple access points in the wireless network quickly and securely.Due to the limitation of computing performance,storage and battery capacity of mobile nodes,handover authentication protocols must be designed with full consideration of these features.In terms of the limitation of large computation cost with pairing in the existing HashHand protocol,this paper proposed a new fast handover authentication protocol,which used the point multiplication of the additive group to replace the pairing operation.The new protocol had a better performance in efficiency than that of HashHand,meanwhile satisfying the security requirements such as user anonymity,untracebility and conditional privacy protection.The user and the authentication server could authenticate mutually,establish the session key securely and refresh it periodically.The new protocol can also effectively resist replay attacks and denial of service attacks.

关 键 词：切换认证 匿名 椭圆曲线 密钥协商 

分 类 号：TN915.08[电子电信—通信与信息系统]