对HEMA模型的注记  

A Note on HEMA

作　　者：王立斌[1] 陈克非[1] 

机构地区：[1]上海交通大学计算机科学与工程系,上海200030

出　　处：《计算机学报》2004年第4期573-576,共4页Chinese Journal of Computers

基　　金：国家自然科学基金 ( 90 10 40 0 5;60 173 0 3 2;60 2 73 0 49)资助

摘　　要：首先通过分析HEMA模型 ,发现其中的若干设计缺陷 ,指出该模型存在的若干冗余 ,还分析讨论该协议中存储并加密传输密钥协商因子设计的不合理性 .然后讨论一个该协议并发运行的实例 ,从而指出该协议可能存在的并发运行错误 ,进一步说明使用可信第三方存储并加密传输可以完全公开的密钥协商因子是个实质性的错误 .最后 ,将HEMA模型与现有的若干认证与密钥交换协议进行比较 ,讨论HEMA的运行效率 .In a recent paper, a hybrid encryption model for authentication(HEMA) was proposed, and the authors declare that HEMA encompasses all the virtues of typical models of authentication and is able to be applied in many sorts of open network systems such as mobile agents and multi-agents systems. In this paper, we point out some defects of HEMA. We show there are some redundancies and concurrent run-time errors in the protocol and indicate that to store and transfer the public key, which is desired to be transferred in open channels, by the trusted party secretly is a substantial error. Furthermore, we discuss the efficiency of the protocol by comparing it with some relative protocols.

关 键 词：认证 密钥交换 安全协议 HEMA模型 混合密码认证模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]