双向认证的密码协议及其形式分析与应用

A Bilateral-Authentication Cryptographic Protocol and Its Formal Analysis and Applications

在安全数据通信中,身份认证和会话密钥的协商是极为重要的问题,近年来,实现这种类型的密码协议主要是通过可信第三方参与身份的认证和会话密钥的协商,因而,可信第三方的可靠性和安全性是系统性能的瓶颈。提出了一个双向的认证密码协议,解决了可信第三方的性能瓶颈问题,是一个更为有效的、安全的密码协议。用串空间的认证测试理论对其进行了形式分析,最后探讨了它在TLS协议中的应用。

Identity authentication and session key agreement in data sending and receiving is essential in the secure communication.In recent years,this kind of cryptographic protocols has been mainly implemented by the intervention of the trusted third party in identity authentication and session key agreement,thus the dependability and security of the trusted third party become a bottleneck in these secure systems.In this paper,a bilateral-authentication cryptographic protocol is proposed.It is a more efficient and secure protocol,which solves the bottleneck problem of the trusted third party.And its formal analysis is presented using authentication test theory in the strand spaces.Finally its applications to TLS protocol are discussed.