泛在接入中移动身份认证安全模型研究  

Research of Model of Security of Mobile Office by the Way of Ubiquitous Access

作　　者：彭红 陈翼[2] PENG Hong;CHEN Yi(CETC Network Security Technology Co.,Ltd.,Chengdu Sichuan 610041;Sichuan Computer Research Institute,Chengdu Sichuan 610041)

机构地区：[1]中电科网络安全科技股份有限公司,四川成都610041 [2]四川省计算机研究院,四川成都610041

出　　处：《软件》2023年第2期107-111,共5页Software

摘　　要：随着移动互联网、云计算、5G等新技术的不断发展,移动办公展现出越来越多的便利性和快捷性。移动办公场景涉及到电子签批、文件流转、费用报销、流程管理、协助协作等环节。不仅对实时性、易用性要求比较高,同时对系统的信息安全要求也高。从信息安全视角看,移动办公使得传统的安全边界由静态变为动态,对传统安全防护措施带来新的挑战,需要提供全流程安全保护。本文分析了目前业界主流移动办公安全解决方案的技术路线,针对身份认证过程中存在的交互环节多、部署安全设备繁杂等应用问题,提出了基于无证书的轻量级的公钥密码认证模型,选用改进的椭圆曲线算法(ECC),利用时间戳和随机数等技术措施,实现移动终端用户与认证服务器之间双向认证,以及抗重放攻击、抗前向攻击和后向攻击,保障移动办公场景中的泛在接入及安全认证。With the development of mobile Internet,cloud computing,5G and other new technologies,mobile office has shown more and more convenience.Mobile office scene involves electronic signature,document flow,expense reimbursement,process management,assistance and other links not only high real-time,but also information security of the system.From the perspective of information security,mobile office makes the traditional security boundary change from static to dynamic,which brings new challenges,and it needs to provide security protection throughout the whole process.The current mainstream mobile office security solution is presented in the paper.According to the process of identity authentication interaction,involving equipment complex application problems,a new security solution is proposed by putting forward efficient public key cryptography authentication model without certificates.An efficient elliptic curve algorithm(ECC)is selected by using timestamp and random number.The two-way authentication between mobile users and authentication server is proposed,in order to realize replay resistance,forward attack and backward attack,guarantee convenient ubiquitous access and security authentication in mobile office situation.

关 键 词：移动互联网 椭圆曲线算法 轻量级模型 泛在接入 身份认证 

分 类 号：TP301[自动化与计算机技术—计算机系统结构]