面向网络切片的无证书切换认证与密钥协商协议  

Certificateless Handover Authentication and Key Agreement Protocol for Network

作　　者：吴玄 姬伟峰[1] 翁江 李映岐 申秀雨 WU Xuan;JI Weifeng;WENG Jiang;LI Yingqi;SHEN Xiuyu(School of Information and Navigation,Air Force Engineering University,Xi'an 710082,China)

机构地区：[1]空军工程大学信息与导航学院,西安710082

出　　处：《北京邮电大学学报》2023年第4期103-108,共6页Journal of Beijing University of Posts and Telecommunications

基　　金：国家自然科学基金项目(61902426)。

摘　　要：为解决网络切片片间切换协议匿名性较差、认证过程复杂和通用性较低等问题,提出了一种基于无证书的高效通用安全切换认证与密钥协商协议。基于无证书机制的密钥协商协议能够解决传统公钥基础设施的证书存储与密钥管理等问题,在保证安全性前提下,能够有效地提高切换认证效率。所提协议通过引入用户伪身份和切片身份标识符实现对用户和网络切片的隐私保护;针对不同服务类型的网络切片,在用户与切片服务提供商之间引入边缘控制器辅助片间切换过程,确保合法用户在切换过程中实现快速通用的身份认证。仿真实验表明,所提协议在提高片间切换认证效率的同时实现了安全、通用的切换过程。In order to solve the problems of poor anonymity,complex authentication process and low generality of handover protocol between network slices,an efficient universal secure handover authentication and key negotiation protocol based on no certificate is proposed.The key negotiation protocol based on certificateless mechanism can solve the problems of certificate storage and key management in traditional public key infrastructure,and can effectively improve the efficiency of handover authentication under the premise of ensuring security.The proposed agreement achieves privacy protection for users and network slices by introducing user pseudo-identities and slice identity identifier.For network slicing of different service types,an edge controller is introduced between the user and the slicing service provider to assist the inter-slice handover process to ensure that legal users can achieve fast and universal identity authentication during the handover process.Simulation results show that the proposed protocol can improve the efficiency of inter-chip handover authentication and realize a secure and universal handover process.

关 键 词：网络切片 切换认证 认证密钥协商 无证书 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]