一种基于非对称加密算法的安全高效身份认证协议  

A Secure and Efficient Identity Authentication Protocol based on Asymmetric Encryption Algorithms

作　　者：赵玉超[1] ZHAO Yu-Chao(Xiamen Ocean Vocational College,Xiamen 361100,China)

机构地区：[1]厦门海洋职业技术学院,福建厦门361100

出　　处：《工业技术创新》2020年第6期103-107,共5页Industrial Technology Innovation

摘　　要：为提高非对称加密算法下网络身份认证协议的安全和效率,将哈希函数、挑战应答机制和异或运算融合到传统的非对称密钥认证过程中,提出一种新的双向认证协议,协议中同时协商产生了成功认证后的一次性对称会话密钥。通过数学推导和针对已知攻击的形式化推演,证明了协议能抵御重放攻击、拒绝服务攻击在内的各种已知攻击,具有较高的安全性能。本协议认证双方仅需两次信息交互即可实现双向认证。经统计计算,本协议的认证运算量与传统的非对称密钥身份认证协议相当。In order to improve the security and efficiency of network identity authentication protocol based on asymmetric encryption algorithm,a new mutual authentication protocol is proposed by integrating hash function,challenge response mechanism and XOR operation into the traditional asymmetric key authentication process.A secure one-time symmetric key is generated after successful authentication.Through mathematical derivation and formal deduction which aim at all known attacks,it is proved that the protocol can resist various known attacks including replay attack and denial of service attack,and has high security performance.In this protocol,the two parties of authentication need only message exchange twice.According to the statistical calculation,the authentication computation of this protocol is equivalent to that of the traditional asymmetric key authentication protocol.

关 键 词：身份认证 非对称加密算法 哈希函数 挑战应答机制 异或运算 

分 类 号：TN918.1[电子电信—通信与信息系统]