自组网中基于离线证书的双向认证协议  

A Bidirectional Authentication Protocol Based on Off-Line Certificates for Ad Hoc Networks

作　　者：任塨晔 REN Gongye(Xi’an Electronic Engineering Research Institute,Xi’an 710100)

机构地区：[1]西安电子工程研究所,西安710100

出　　处：《火控雷达技术》2023年第3期49-55,共7页Fire Control Radar Technology

摘　　要：由于自组织网络缺乏基础设施,并且节点的加入和离开较为频繁,传统的基于证书中心(Certificate Authority,CA)的身份认证方式存在CA节点选举和转移、单点失效等问题。针对这些问题,提出一种基于离线证书的双向认证协议。节点在启用前通过离线方式获得自己的证书,在认证过程中通过交互证书并以“挑战/应答”的方式实现网内节点和网外节点的双向认证。安全性分析表明,该认证协议可识别非法入侵和身份冒充,并可抵御重放攻击。Due to the lack of infrastructure and frequent joining and leaving of nodes in ad hoc networks,the traditional certificate authority(CA)based identity authentication paradigms have some problems when they are used in ad hoc networks,involving election and transfer of CA nodes and single point of failure.To solve these problems,a bidirectional authentication protocol based on off-line certificates is proposed.With the proposed protocol,the nodes obtain their own certificates in an off-line way before being activated,and the bidirectional authentication between nodes inside the network and nodes outside the network is realized through the exchange of certificates and“challenge-response”authentication.Security analysis results show that the proposed protocol can identify illegal intrusion and impersonation attack,and it can also resist replay attacks.

关 键 词：自组网 身份认证 离线证书 可信集 

分 类 号：TN95[电子电信—信号与信息处理]