一种基于双线性配对的天地一体化网络安全身份认证方案  

A Secure Identity Authentication Scheme for Space-ground Integrated Network Based on Bilinear Pairing

作　　者：赵国锋[1] 周文涛 徐川[1] 徐磊 ZHAO Guofeng;ZHOU Wentao;XU Chuan;XU Lei(Future Network Research Center,Chongqing University of Posts and Telecommunications,Chongqing 400065,China;Sichuan Jiuqiang Communication LTD.,Mianyang 621000,China)

机构地区：[1]重庆邮电大学未来网络研究中心,重庆400065 [2]四川九强通信科技有限公司,绵阳621000

出　　处：《信息网络安全》2020年第12期33-39,共7页Netinfo Security

基　　金：国家重点研发计划[2018YFB1800304];四川省重大科技专项[2018GZDZX0014]。

摘　　要：文章提出一种基于双线性配对的天地一体化网络安全身份认证方案,认证过程中无需第三方参与即可完成网络内实体间的双向认证,且在认证过程中会协商出会话密钥,为后续的数据传输提供机密性保障。此外,方案的安全性基于椭圆曲线离散对数困难问题(ECDLP)和椭圆曲线计算Diffie-Hellman困难问题(ECCDHP),安全性高,能够防御多种形式的攻击。文章最后对方案的可行性和有效,性进行了理论及性能分析。This paper proposes a secure identity authentication scheme for space-ground integrated network based on bilinear pairing.In the process of authentication,the two-way authentication between entities in the network can be completed without the participation of a third party,and the session key will be negotiated during the authentication process.The key provides confidentiality protection for the subsequent data transmission.In addition,the security of the proposed scheme is based on the elliptic curve discrete logarithm difficulty problem(ECDLP)and the elliptic curve computational Diffie-Hellman difficult problem(ECCDHP).It has high security and can defend against various forms of attacks.Finally,thisp paper conducts a theoretical analysis for the scheme of the feasibility and effectiveness.

关 键 词：天地一体化网络 双线性配对 双向认证 密钥协商 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]