糅合多种因素的双向身份认证密钥协商协议  

A Multifactor Mutual Identity Authentication Key Agreement Protocol

作　　者：黄朝阳 陈少英 HUANG Chao-yang;CHEN Shao-ying(School of Information Engineering,Xiamen Ocean College,Xiamen,361001,Fujian)

机构地区：[1]厦门海洋学院信息工程学院,福建厦门361001

出　　处：《蚌埠学院学报》2024年第5期56-66,共11页Journal of Bengbu University

基　　金：中国高校产学研创新基金(2020ITA05024)。

摘　　要：为了提高身份认证协议的安全性能,提出一种糅合多种安全因素的双向身份认证密钥协商协议,该协议引入高熵随机数,糅合智能卡、生物特征认证和公钥密码体制等多种安全因素。通信双方通过挑战/应答机制的三次握手来实现双向认证,并协商生成后续会话所需密钥。通过BAN逻辑分析和多种已知攻击的非形式化安全分析证明,本协议有较高的安全性能。本协议实现双向认证所需通信带宽为1360 bits,通信总轮数为3次,期间仅需一次非对称加密、一次非对称解密和12次Hash运算。与其它相关协议相比,该协议有效降低了运算复杂度,展现出更高的效率。In order to improve the security of identity authentication protocols,a new mutual identity authentication key agreement protocol that combines multiple security factors was proposed in the paper.This protocol introduces high entropy random numbers and combines various security factors such as smart cards,biometric authentication and public-key cryptosystem.The both sides of communication achieve mutual authentication through three handshakes of challenge/response mechanism,and negotiate to generate the key required for subsequent sessions.Through BAN logic analysis and informal security analysis of many known attacks,it was proved that the protocol has high security performance.The communication bandwidth required for mutual authentication in this protocol is 1360 bits,with the total number of communications is 3.During this period,only one asymmetric encryption,one asymmetric decryption,and 12 Hash operations are required.Compared with other related protocols,this protocol effectively reduces computational complexity and presents higher efficiency.

关 键 词：身份认证 密钥协商 公钥密码体制 生物特征 智能卡 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]