移动边缘计算场景下基于身份的安全认证密钥协商协议  

Identity-based Secure Authentication and Key Agreement Protocol for Mobile Edge Computing

作　　者：叶文慧 王金花 张文政[1] 周宇[1] 刘妍妍 YE Wenhui;WANG Jinhua;ZHANG Wenzheng;ZHOU Yu;LIU Yanyan(National Key Laboratory of Security Communication,No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所保密通信全国重点实验室,四川成都610041

出　　处：《通信技术》2024年第4期400-408,共9页Communications Technology

基　　金：四川省科技计划:抗量子基于身份加密方案的研究(2022JDRC0061)。

摘　　要：移动边缘计算的快速发展推动了对新型安全技术的研究。认证密钥协商协议作为保障安全通信的重要方法之一,得到了广泛的关注,但现有的面向移动边缘计算的认证密钥协商协议并不能很好地同时满足移动边缘计算的安全性和性能需求。针对这一问题,提出了移动边缘计算场景下的认证密钥协商协议。首先,协议方案根据移动用户和边缘计算服务器的身份构建身份认证的凭证,双方通过该凭证完成相互认证并构建会话密钥,保证了通信安全;其次,通过形式化分析和非形式化分析证明了方案具有良好的安全性能;最后,由于所提方案避免使用包括双线性对在内的计算开销较大的密码学运算,在计算和通信开销方面的表现也较优。The rapid development of mobile edge computing is driving the demand for research on new security technologies.As one of the important methods for ensuring secure communication,authentication and key agreement protocols receive widespread attention.However,existing authentication and key agreement protocols for mobile edge computing cannot meet the security and performance requirements of mobile edge computing at the same time.To address this problem,an authentication and key agreement protocol for mobile edge computing scenario is proposed.First,the protocol scheme constructs the identity authentication credentials according to the identities of the mobile user and the edge computing server,through which the two parties complete mutual authentication and construct the session key,which ensures the communication security.Then,the scheme is proved to have good security performance through formal and non-formal analysis.Finally,since the proposed scheme avoids the use of cryptography operations with large computational overheads including bilinear pairing,it also performs better in terms of computing and communication overheads.

关 键 词：移动边缘计算 基于身份的密码学 认证密钥协商 可证明安全 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]