改进的移动商务身份认证方案设计

Design of the Improved Mobile Business Identification Project

本文对移动电子商务系统进行了探讨和分析,并针对移动通信的终端设备多以计算能力相对较弱,存储量小的智能卡为主的特点,基于椭圆曲线密码体制,提出了适用于移动电子商务的一种改进的TDAKA(双向认证与密钥协商)协议,同以往方案做了比较,并对该方案的安全性和计算复杂性进行了分析。该协议有以下特点:实现了网络和用户的双向认证;采用数字签名,用户对业务具有不可否认性;由于利用椭圆曲线公开密钥密码算法,使得在同样的安全水平下,可以减小密钥长度,加快计算速度,适应移动通信系统环境。

This thesis firstly carries on the discussion and analysis to the mobile commerce system. Aimed at the intelligent card characteristics of weakly computing ability and limited memory, based on elliptic curve cryptosystem, this paper presents efficient protocol for TDAKA (two directional authentication and key assignment) which is suitable for mobile commerce. After comparing with previous ones, its security and computation complexity of the proposed protocols are analyzed in succession. The proposed protocols have the following characteristics: two directional authentication and key confirmation between network and user; users’ digital signature provides non-repudiation of the signed data; the utilization elliptic curve cryptosystem makes it possible to reduce the length of key and accelerate the computation. In general, it is suitable for mobile environment.