一个无线认证协议的分析与改进

Analysis and Improvement of an Anonymous Wireless Authentication Protocol

分析了一个匿名移动无线认证方案中的CSAP协议,发现其存在安全漏洞,无法抵抗不诚实的基站对系统的攻击.针对这些安全漏洞对该协议进行了改进,改进后的协议不仅保留了原方案的所有安全特性,并且比原协议具有更高的安全性.

By analyzing the security of an anonymous wireless authentication scheme,it is pointed out that the CSAP protocol in that scheme suffers from some security vulnerabilities which are vulnerable to an attack by a malicious base station. An improved scheme to overcome the weakness is proposed, and the improved scheme that preserves all the security properties in the original scheme possesses higher security.