一个改进的无证书跨域认证密钥协商协议  

An improved certificateless cross-domain authentication key agreement protocol

作　　者：李慧敏 梁红梅[3] 张金辉 LI Huimin;LIANG Hongmei;ZHANG Jinhui(School of Mathematics and Finance,Putian University,Putian 351100,China;Key Laboratory of Applied Mathematics of Fujian Province University(Putian University),Putian 351100,China;School of Mathematics and Statistics,Minnan Normal University,Zhangzhou 363000,China)

机构地区：[1]莆田学院数学与金融学院,福建莆田351100 [2]应用数学福建省高校重点实验室(莆田学院),福建莆田351100 [3]闽南师范大学数学与统计学院,福建漳州363000

出　　处：《延边大学学报（自然科学版）》2022年第2期143-150,共8页Journal of Yanbian University（Natural Science Edition）

基　　金：福建省自然科学基金(2020J01905);福建省教育厅中青年教师教育科研项目(JAT200514);莆田市科技计划项目(2021R4001-10)。

摘　　要：针对文献[11]中提出的CAKA协议存在的无法认证对方身份和容易受到替换公钥攻击威胁的安全问题,给出了一种改进协议.该协议改进了原协议中的3个步骤,使得参与协议的双方用户在执行协议过程中必须用到各自的全部私钥,并在协议双方发送的消息中加入各自的身份信息.实验表明,该改进协议不仅能够克服原协议中的安全性问题,而且提高了计算效率.因此该改进协议对基于无证书公钥系统构造的密钥协商协议具有良好的参考价值,同时也可为同类跨域密钥协商协议的分析与设计提供参考.Aiming at the security problems of CAKA protocol proposed in reference [11],which can not authenticate each othery’s identity and will be threatened by replacement public key attack easily,this paper presents an improved protocol.The protocol improves the three steps in the original protocol,so that users on both sides of the protocol must use all their private keys in the process of executing the protocol,and add their identity information to the messages sent by both sides of the protocol.Experiments show that the improved protocol can not only overcome the security problem in the original protocol,but also improve the computational efficiency.Therefore,the improved protocol proposed in this paper has a good reference value for the key agreement protocol based on certificateless public key system,and can also provide a good reference for the analysis and design of similar cross domain key agreement protocols.

关 键 词：无证书 跨域认证 密钥协商协议 公钥密码 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]