基于ECC的密钥协商及双向认证方案

ECC-based key agreement and mutual authentication scheme

针对当前移动通信系统中认证和密钥协商协议存在的安全缺陷,提出一种基于椭圆曲线密码体制的双向认证和密钥协商方案,用于移动网络中任意用户之间,或用户与网络之间进行双向认证和会话密钥的安全协商。该方案采用ECC技术,能够在更小的密钥量下提供更大的安全性,减少对带宽的需求,降低移动终端的计算负担和存储要求。

The shortage of security in the authentication and key agreement protocol for the mobile communication system are proposed, an key agreement and mutual authentication scheme based on elliptic curve cryptograph techniques is proposed. The mutual authentication and agreement on a secure session key is realized, between users, or between user and network server in the mobile network. By using the ECC techniques, greater security with fewer bits is provided. As the result, the bandwidth requirement is less, and furthermore, computational burden and storage requirement is also lower on the mobile terminals.