面向体育运动体征数据的两方认证密钥协商协议  

TWO-PARTY AUTHENTICATED KEY AGREEMENT PROTOCOL FOR SPORTS SIGN DATA

作　　者：陈勤[1] 唐明欢 吴宁 Chen Qin;Tang Minghuan;Wu Ning(Hunan University of Humanities,Science and Technology,Loudi 417000,Hunan,China;Beibu Gulf University,Qinzhou 535011,Guangxi,China)

机构地区：[1]湖南人文科技学院,湖南娄底417000 [2]北部湾大学,广西钦州535011

出　　处：《计算机应用与软件》2023年第5期338-344,共7页Computer Applications and Software

基　　金：广西引进海外人才“百人计划”项目([2018]46);北部湾大学校级科研项目(2018KYQD34)。

摘　　要：针对物联网中体育运动体征数据的安全传输问题,提出一种可证安全的高效认证密钥协商协议。协议基于椭圆曲线上的无证书公钥密码体制实现,无须使用双线性对运算,通过“三次握手”完成通信实体间的双向身份认证和会话密钥协商。形式化的安全性分析表明,协议在随机谕言机模型下具有可证明安全性,能够抵抗窃听、篡改、重放、身份伪造等攻击方式,并提供完美前向安全性且无密钥托管问题。对比结果表明,相较于同类协议,该协议具有更高的安全性,并且在通信开销和计算开销方面具有优势。Aiming at the problem of secure transmission of sports sign data in the Internet of things(IoT),this paper proposes a provably secure and efficient authenticated key agreement protocol.The protocol was based on the certificateless public key cryptosystem on elliptic curve,which did not need bilinear pairing operation and completed the mutual authentication and session key agreement between communication entities through“three handshakes”.The formal security analysis shows that this protocol has provable security in the random oracle model,which can resist eavesdropping,tampering,replay,identity forgery and other attacks,and provides perfect forward secrecy as well as no key escrow problem.The comparison results show that,compared with similar protocols,the proposed protocol provides higher security and has advantages in communication and computing overhead.

关 键 词：体征数据 认证密钥协商 无证书密码体制 完美前向安全性 可证明安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]