基于椭圆曲线加密算法与SHA-3算法的新型认证方案分析与设计  

Analysis and Design of New Authentication Scheme Based on ECC and SHA-3 Algorithm

作　　者：郭军 GUO Jun(China Electronics Technology Group Corporation No.7 Research Institute,Guangzhou 510310,China)

机构地区：[1]中国电子科技集团公司第七研究所,广东广州510310

出　　处：《移动通信》2020年第8期87-90,96,共5页Mobile Communications

摘　　要：针对物联网系统的数据传输开放性、加密及认证开销成本高的问题,提出一种基于椭圆曲线加密算法与SHA-3算法结合的认证方案,并运用BAN逻辑的形式化分析方法,对该方案的安全性进行分析验证。结果显示,该方案能够实现服务器与设备之间,以及各设备之间的双向身份认证,能够提供通信双方的会话密钥协商,并能保持会话密钥的新鲜性。Aiming at the problems of openness of data transmission, high cost of encryption and authentication in the Internet of things system, this paper proposes an authentication scheme based on elliptic curve cryptography and SHA-3 algorithm, and uses the formal analysis method of BAN logic to analyze and verify the security of the scheme. The results show that the scheme can achieve two-way identity authentication between servers and devices, and between devices. It can provide session key agreement between the two communication entities, and can maintain the freshness of the session key.

关 键 词：椭圆曲线加密算法 SHA-3算法 密钥协商 BAN逻辑 

分 类 号：TN929.5[电子电信—通信与信息系统]