轻量级的两方认证密钥协商协议  

Lightweight Two-Party Authentication Key Agreement Protocol

作　　者：宋庆 马米米 邓淼磊[1] 左志斌 SONG Qing;MA Mimi;DENG Miaolei;ZUO Zhibin(College of Information Science and Engineering,Henan University of Technology,Zhengzhou 450001,China)

机构地区：[1]河南工业大学信息科学与工程学院,郑州450001

出　　处：《计算机工程与应用》2024年第14期283-293,共11页Computer Engineering and Applications

基　　金：国家自然科学基金(61902111)。

摘　　要：轻量级的两方认证密钥协商协议允许通信双方在公开信道上建立一个相同且安全的会话密钥。现有的认证协议难以满足轻量级的需求,同时多数轻量级协议仍存在某些安全问题。基于此,提出了一种基于身份的两方匿名轻量级逆向防火墙认证密钥协商协议。该协议在eCK模型下结合BAN逻辑被证明是安全的。协议提供匿名性、完美前向安全性、抗重放攻击、抗Dos攻击、抗中间人攻击。与其他轻量级认证协议对比发现,该协议具有更高的安全性和较短的运行时间,适用于资源受限设备。Lightweight two-party authentication key agreement protocols allow both communicating parties to establish an equal and secure session key over a public channel.Existing authentication protocols have difficulty in meeting the needs of lightweight,while most lightweight protocols have some security issues.For this reason,an identity-based twoparty anonymous lightweight reverse firewall key agreement protocol is proposed.The protocol is proven to be secure under the eCK model in combination with BAN logic.The protocol provides anonymity,perfect forward security,resistance to replay attacks,resistance to Dos attacks,and resistance to man-in-the-middle attacks.Finally,when compared with other lightweight authentication protocols reveals,it is found to have higher security and shorter running time for resource-constrained devices.

关 键 词：身份认证 密钥协商 逆向防火墙 轻量级 eCK模型 BAN逻辑 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]