一种Canetti-Krawczyk模型下的快速认证协议

Fast authentication protocol based on the Canetti-Krawczyk model

基于Canetti-Krawczy模型的安全性定义与模块化特性,利用公钥加密和消息认证码技术,构造了一个快速认证协议,并对该协议的安全性进行了详细的分析.分析表明,该协议实现了Canetti-Krawczy模型下可证明安全的快速身份认证、密钥协商和密钥更新,且具有双向实体认证、完美的向前保密性等安全属性,满足了认证的安全需求.该认证协议仅需进行2轮交互即可完成,与现有同类协议相比,通信开销小,计算量较低,为用户间的相互认证提供了一种高效的解决方案.

Based on the Canetti-Krawczyk（CK） model, a fast authentication protocol which makes use of the public key cryptography and the Message Authentication Code is proposed. The security analysis of the proposed protocol in the implementation plan with the CK model is presented. The results show that the proposed protocol is session-key secure with Perfect Forward Secrecy, Known Key Security and No Key Compromise Impersonation. Moreover, the implementation of the protocol requires just two rounds of communications and a little computation, and it could be an efficient authentication method between users in a network.