陈　虹　徐嘉鸿　肖振久

1(辽宁工程技术大学软件学院　辽宁 葫芦岛 125105)

2(中国传媒大学计算机学院　北京 100024)



基于身份的认证密钥协商协议的改进

陈虹1徐嘉鸿1肖振久2

1(辽宁工程技术大学软件学院辽宁 葫芦岛 125105)

2(中国传媒大学计算机学院北京 100024)

摘要针对已有的基于身份的认证密钥协商协议存在的安全问题，提出一种改进的基于身份的认证密钥协商协议。该协议采用双线性对运算方法, 用户双方的临时和长期私钥结合进行最终会话密钥的计算，解决了原协议中存在的PKG前向安全性问题、单一依赖临时或长期私钥而存在的问题和已知临时会话密钥泄漏攻击的问题。在保证改进协议正确基础上，对协议的安全属性及协议性能进行了分析。采用SVO逻辑对协议进行形式化分析，验证了改进协议的认证性和安全性。结果表明，改进的协议满足基于身份认证密钥协商协议的所有安全性要求，与已有基于身份的认证密钥协商协议相比具有更好的安全属性及计算效率。

关键词基于身份的认证密钥协商双线性对SVO逻辑形式化验证

IMPROVEMENT OF ID-BASED AUTHENTICATED KEY AGREEMENT PROTOCOL

Chen Hong1Xu Jiahong1Xiao Zhenjiu2

1(School of Software,Liaoning Technical University,Huludao 125105,Liaoning,China)2(School of Computer,Communication University of China,Beijing 100024,China)

AbstractTo solve the security problem in existing ID-based authenticated key agreement protocol, in this paper we propose an improved ID-based authenticated key agreement protocol. The protocol uses bilinear pairing operation method, combines the temporary and long-term private keys of both users sides to calculate the final session key, and solves the problem of PKG-forward security in previous protocol, the problem caused by singly depending on the temporary or long-term private keys, and the problem of known temporary session key leakage attacks. Based on ensuring the correctness of the improved protocol, we analyse the security attribute and the performance of the improved protocol, and carry out formal analysis on the protocol with SVO logic, as well as verify the authentication property and security of the improved protocol. Results show that it satisfies all the security requirements of an ID-based authenticated key agreement protocol. Comparing with other existing similar protocols, it has better safety attribute and higher computational efficiency.

KeywordsID-based authenticationKey agreementBilinear pairingSVO logicFormal verification

0引言

密钥协商协议作为最基础的密码原语之一，旨在在敌手控制的非安全信道中，两个或多个通信用户交换信息，用户间彼此认证对方的身份，并协商出一个共享的会话密钥。所协商出的会话密钥可在将来的通信会话中使用，且对通信系统中传输的数据提供机密性和认证性等服务。

Diffie和Hellman[1]提出了第一个对等环境下的密钥协商协议，而基本的Diffie-Hellman协议并不提供通信双方的认证，因而存在中间人攻击的安全问题。……