一种安全两群体认证协议  

A Secure Two-group Authentication Protocol

作　　者：刘卓[1,2] 马敏耀[1,2] 邱克娥[1] 冯君 LIU Zhuo;MA Minyao;QIU Ke-e;FENG Jun(School of Mathematics and Computer Scienc,Guizhou Education University,Guiyang 550018,China;School of Computer Science and Technology,Huazhong University of Science and Technology,Wuhan 430000,China;Key Laboratory of Cyberspace Security,Guizhou Education University,Guiyang 550018,China)

机构地区：[1]贵州师范学院数学与计算机科学学院,贵阳550018 [2]贵州师范学院网络空间安全重点实验室,贵阳550018 [3]华中科技大学计算机科学与技术学院,武汉430000

出　　处：《计算机工程》2018年第9期141-148,共8页Computer Engineering

基　　金：贵州省教育厅青年科技人才成长项目(黔教KY字[2017]210;黔教KY字[2017]205);贵州省教育厅科技拔尖人才支持项目(黔教KY字[2017]081);贵州省科学技术基金(黔科合基础[2016]1115);贵州省省级重点支持学科项目"计算机应用技术"(ZDXK201620)

摘　　要：针对传统1-to-1和m-to-1认证模式中认证密码容易泄露的安全隐患,提出一种m-to-n认证模式。系统认证时,由m个客户端同时向n个认证服务器发起认证请求,将该认证模式抽象为安全两群体计算模型,并定义其在半诚实模型下的安全性。构造一个安全多方求和协议,并以该协议为基本构建模块,将健忘传输协议作为基本密码工具,设计安全两群体认证协议。分析结果表明,该协议安全性和效率较高,能够解决两群体群体内及群体间的安全认证问题。In order to solve the problem that the authentication cipher security risk of the traditional 1-to-1 and m-to-1 authentication mode is easier to leak,the paper proposes a m-to-n authentication mode,which includes m clients and n authentication servers.m clients request to n servers at the same time.In this mode,m clients and n servers are abstracted as the secure two-group computation model.It defines the model security under the semi-honest model,puts forward a security multi-party summation protocol.Taking the security multi-party summation protocol as the basic building block and the forgetfulness transfer protocol as the basic cryptographic tool,this paper designs a secure two-group authentication protocol.Analysis results show that this protocol has higher security and efficiency,it can solve the problem of security authentication between intra group and inter group.

关 键 词：安全多方计算 安全两群体计算 m-to-n认证模式 半诚实模型 健忘传输协议 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]