基于智能卡的匿名认证与密钥协商协议  

AN ANONYMOUS AUTHENTICATION AND KEY AGREEMENT PROTOCOL BASED ON SMART CARD

作　　者：张平[1] 贾亦巧 王杰昌 付主木 Zhang Ping;Jia Yiqiao;Wang Jiechang;Fu Zhumu(School of Mathematics and Statistics,Henan University of Science and Technology,Luoyang 471023,Henan,China;Computer Teaching and Research Section,Physical Education College of Zhengzhou University,Zhengzhou 450044,Henan,China;School of Information Engineering,Henan University of Science and Technology,Luoyang 471023,Henan,China)

机构地区：[1]河南科技大学数学与统计学院,河南洛阳471023 [2]郑州大学体育学院计算机教研室,河南郑州450044 [3]河南科技大学信息工程学院,河南洛阳471023

出　　处：《计算机应用与软件》2023年第4期282-288,共7页Computer Applications and Software

基　　金：国家自然科学基金项目(11401172);河南省高等学校重点科研项目(20A520012)。

摘　　要：传统的基于身份的认证密钥协商协议常常无法保证客户的匿名性,且存在一些安全性问题。针对这种情况,提出一种基于智能卡的匿名认证与密钥协商协议。协议融入了智能卡对客户的口令和生物认证技术,以此确保了客户的匿名性,同时防止了因智能卡遗失所造成的冒充攻击,并在eCK模型与随机预言机模型下基于椭圆曲线离散对数难题证明了新协议的安全性。性能分析表明,新协议具有更强的安全属性、更高的通信效率、良好的推广性。Traditional identity-based authentication protocols often fail to guarantee the anonymity of customers and have some security problems.To solve this problem,an anonymous authentication and key agreement protocol is proposed.The protocol combined the smart card with the password of the cardholder and the biometric authentication technology,so as to ensure the anonymity of customers while preventing fake attacks caused by the loss of smart card.And the security of the proposed protocol was proved based on the eCK model and random oracle model(ROM)under the discrete logarithm problem of elliptic curve.The performance analysis shows that the proposed protocol has stronger security,higher communication efficiency and better popularization.

关 键 词：匿名认证 密钥协商 离散对数 安全模型 智能卡 生物认证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]