Strongly Secure Anonymous Implicit Authentication and Key Agreement for Roaming Service
-
摘要: 现有两方漫游认证与密钥协商方案没有考虑抵抗临时秘密泄露的安全性，仅在CK模型下可证明安全.基于椭圆曲线密码体制和基于身份密码系统，采用Schnorr签名算法设计了类似HMQV方案的“挑战-应答”签名，进而构造了一种基于隐式认证技术的、具有强安全性和匿名性的两方漫游认证密钥协商方案.随后，扩展了ID-BJM模型，使之能模拟两方漫游认证与密钥协商方案.在扩展的安全模型下，新方案的安全性被规约为多项式时间敌手求解椭圆曲线上的计算Diffie-Hellman问题，实现了eCK安全.对比分析表明：新方案具有更强的安全性，能抵抗临时秘密泄露攻击，需要实现的密码算法更少，计算、通信和存储开销都相对较低.新方案可应用于移动通信网络、物联网或泛在网络中，为资源约束型移动终端提供安全的漫游接入服务.Abstract: The existing two-party authentication and key agreement protocols for roaming service are provably secure in the CK model, and do not resist the attack of ephemeral secrets reveal. Based on elliptic curve cryptography and identity-based cryptosystem, we propose an anonymous two-party authentication and key agreement scheme for roaming service. The new scheme, based on the Schnorr signature, achieves mutual implicit authentication by a well designed “challenge-response” signature which is similar to the one in the HMQV protocol. We extend the ID-BJM model, a widely used security model for analyzing identity-based authenticated key agreement protocols, to simulate two-party authentication and key agreement schemes for roaming service. Furthermore, we demonstrate that the new scheme is eCK secure under the extended ID-BJM model, and that the security of the new scheme can be reduced to solve (by a polynomial-time adversary) computational Diffie- Hellman problems on an elliptic curve over finite fields. Comparative analysis shows that the new scheme has stronger security, achieves resistant to ephemeral secrets reveal, needs fewer cryptography libraries, and has lower computing, communication and storage overheads. The new scheme can be used to provide secure roaming authentication for resource constrained mobile terminals in global mobility networks, Internet of things or ubiquitous networks.
-
-
期刊类型引用(9)
1. 杨海龙，靳新华. 基于ECC复合加密的医院网络隐私信息安全保护方法. 自动化技术与应用. 2024(08): 140-143+166 . 
百度学术
2. 贾卉楠，王斌. 基于移动群智感知的隐私保护研究. 佳木斯大学学报(自然科学版). 2024(09): 16-18+69 . 百度学术
3. 杨小琴，朱玉全. 网络加密数据跨平台迁移自适应决策模型构建. 计算机仿真. 2023(01): 437-440+516 . 百度学术
4. 蒋沥泉，秦志光. 基于属性隐藏的高效去中心化的移动群智数据共享方案. 电子科技大学学报. 2023(06): 915-924 . 百度学术
5. 蔡波. 马尔可夫预测的移动群智感知网络日志信息收集. 西安工程大学学报. 2022(01): 115-120 . 百度学术
6. 佘晓萌 ，杜洋 ，马文静 ，殷赵霞 . 基于像素预测和块标记的图像密文可逆信息隐藏. 计算机研究与发展. 2022(09): 2089-2100 . 本站查看
7. 王磊，陈磊，张明儒，魏敏，李晋先. 面向数据库查询的非结构化数据融合存储系统. 电子设计工程. 2022(24): 148-152 . 百度学术
8. 李卓，宋子晖，沈鑫，陈昕. 边缘计算支持下的移动群智感知本地差分隐私保护机制. 计算机应用. 2021(09): 2678-2686 . 百度学术
9. 熊金波，毕仁万，田有亮，刘西蒙，马建峰. 移动群智感知安全与隐私:模型、进展与趋势. 计算机学报. 2021(09): 1949-1966 . 百度学术
其他类型引用(13)
计量
- 文章访问数: 1239
- HTML全文浏览量: 1
- PDF下载量: 469
- 被引次数: 22
下载:
