基于身份的多服务器认证密钥协商方案

Identity-based smart card remote authenticated key agreement protocol for multi-servers

将基于身份的密码体制与远程多服务器密钥协商相结合,提出一种基于身份的远程多服务器密钥协商方案.用户注册时由私钥生成中心颁发私钥并安全存放于智能卡中.用户登录服务器前,双方采用基于身份的双线性配对计算进行双向身份认证,并协商生成会话密钥.服务器端无须保存口令表,用户端无须建立数据表存储相关登录信息,无须在终端能离线更改登录口令.该方案减少了密钥协商的通信开销、计算开销以及存储开销,在标准BR安全模型下该方案被证明是安全的.

An efficient remote authenticated key agreement scheme with multi-servers using identity-based cryptography was proposed.The private key issued by the key generation center stores in the smart card security.The mutual authentication based bilinear will be achieved as well as a session key generation before user′s login.In the scheme neither servers nor users preserve the password table.Users do not need register to multi-servers when they login a new server.The proposed scheme provides the explicit key authentication between users and servers.Furthermore,it reduces the communication costs,computation and storage consuming.Additionally,the scheme has been proved secure by the standard BR security model of authenticated key agreement protocols.