一种基于无证书的SIP认证密钥协商协议  

SIP Authentication Key Agreement of Protocol Based on Certificateless

作　　者：莫天庆 何咏梅 MO Tian-qing;HE Yong-mei(Communication Regiment of PAP Chongqing Corps,Chongqing 404100,China;Communication Regiment of PAP Xizang Corps,Lhasa 850000,China)

机构地区：[1]武警重庆总队通信大队,重庆404100 [2]武警西藏总队通信大队,拉萨850000

出　　处：《计算机科学》2020年第S01期413-419,共7页Computer Science

摘　　要：针对现有SIP(会话初始协议)认证机制不能抵抗临时秘密泄露攻击和系统开销大的问题,提出了一种基于改进SIP协议的SIP安全认证模型。借鉴原有协议流程,设计了一种强安全的SIP两方匿名认证密钥协商子协议。新协议利用无证书签密的特性实现通信实体的双向认证、密钥协商和不可追踪。在现有seCK(不仅包含eCK模型,而且捕捉了临时中间泄露抵抗的安全性)模型下对新协议进行了安全性证明,其安全性被规约为多项式时间敌手求解CDH问题。与现有同类协议相比,新协议只需7次点乘运算和3次消息交互,具有安全性更强、计算和通信开销较低的特点。The existing authentication schemes for SIP do not resist the attack of ephemeral secrets reveal,and have high system costs.A safe communicated model of SIP network based on improved SIP was proposed.Basing on the primary flow of SIP and combing with certificateless signcryption,a new anonymous two-party authenticated key agreement protocol was adopted to achieve mutual authentication and unlinkability.Furthermore,the new protocol is provably secure in the seCK model under the CDH assumption.Comparative analysis results show that our protocol is very simple and efficient.

关 键 词：认证密钥协议 SIP 可证明安全 无证书签密 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]