身份基认证密钥协商协议分析与改进

Analysis and Improvement of a New Identity-based Authenticated Key Agreement Protocol

认证密钥协商协议的安全一直都是一个著名难题,很多协议在设计完成后都被发现有某些安全缺陷,为了使得通信参与方能在公共数据网络进行安全通信,分析了孙继敏等人在2008年给出的认证密钥协商协议,研究证明该协议不能抵抗密钥泄露伪装攻击,给出了具体的攻击方案,在原有协议的基础上提出了一个新的可以抵抗这种攻击的改进协议,最后对改进后的协议的安全性进行了分析。经过分析表明该协议满足较高的安全性,提供了已知密钥安全性、完善前向保密性、密钥泄露安全性、未知密钥共享安全性和密钥控制等安全性,并且新协议在计算效率和安全性方面取得了较好的平衡,更加适合现实网络通信的需要。

This certificateless authenticated key agreement protocol proposed by Sun et al does not have the property of Key-Compromise Impersonation（KCI） resilience in 2008.This paper also conducted a detailed analysis on the flaw.To avoid this shortcoming,an improvement of the identity-based protocol was proposed based on the original scheme.An ID-based mutual authentication and key agreement scheme is proposed in this paper,in which some characteristics of bilinear map are used.This scheme permits two communicating sides to authenticate other＇ s identity and agree the session key fairly.This protocol have better security characteristic.