格上基于生物特征和口令的匿名多方认证密钥交换协议  

Multi-party authenticated key exchange protocol based on biometric and password from lattice

作　　者：黄鹏娟 党小娟 戴静[1] 樊飞转 HUANG Lijuan;DANG Xiaojuan;DAI Jing;FAN Feizhuan(Shaanxi Fashion Engineering University,Xi'an 712046,China)

机构地区：[1]陕西服装工程学院,西安712046

出　　处：《计算机应用文摘》2023年第22期77-79,共3页Chinese Journal of Computer Application

基　　金：陕西服装工程学院基金项目:格上基于生物特征和口令的认证密钥交换协议研究(2022KY14)。

摘　　要：为了解决网络考试系统中学生信息的安全性以及身份认证问题,文章提出一个基于格的匿名多方认证密钥交换协议,使得同一班级的学生能在可信服务器的帮助下实现身份认证和安全地登录考试系统。协议中还建立了高熵的会话密钥,可用于解密从服务器下载的考卷和加密答题卡信息。该协议基于格上误差学习(LWE)的困难性问题,由具有标签的可拆分公钥加密体制构造,利用相应近似平滑投射函数的纠错性、伪随机函数以及生物特征信息获得会话密钥。文章设计的基于生物特征和口令的双因子认证密钥交换协议,使得即使某一因子丢失,攻击者也不能获得会话密钥,实现了服务器对客户的显式认证。性能分析表明,该协议具有较高的安全性,能够抵抗伪造攻击和量子攻击,可确保学生的信息安全。In order to solve the security of student information as well as the authentication problem in online examination systems,this article proposes a lattice based anonymous multi-party authentication key exchange protocol,which enables students in the same class to achieve identity authentication and secure login to the exam system with the help of a trusted server.The protocol also establishes a high entropy session key that can be used to decrypt exam papers downloaded from the server and encrypt answer sheet information.The protocol is based on the difficulty problem of learning from errors on lattice(LWE),constructed from a detachable public key cryptosystem with labels,and the session key is obtained using the error correction of the corresponding approximate smooth projection function,pseudo-random functions,and biometric information.The two-factor authentication key exchange protocol based on biometric and password designed in this paper makes it impossible for an attacker to obtain the session key even if a factor is lost,and achieves explicit authentication of the server to the client.The performance analysis shows that the protocol has high security properties and can resist forgery attacks and quantum attacks to ensure the information security of students.

关 键 词：生物特征 口令认证 LWE问题 平滑投射函数 

分 类 号：TN918[电子电信—通信与信息系统]