摘要
为了提高无线网络环境中PKI认证的效率,引入可信证书验证代理(TCVP)和证书有效性凭据(CVT)等概念,对PKI认证机制进行了优化,并在此基础上设计了无线认证协议。该协议中,TCVP基于PKI机制对无线网络节点(WN)进行身份认证并为其签发CVT。WN仅需出示CVT即可证明其身份。该协议不但避免了在移动无线终端中执行公钥证书的在线验证操作,还减少了认证协议的消息数。与SSL和WTLS的对比分析结果表明,该协议的传输开销和计算开销更小。
To improve the efficiency of PKI authentication in wireless network environment,new concepts of trusted certificate proxy（TCVP） and certificate validity ticket（CVT） are introduced and an optimized scheme of PKI authentication is proposed.Then,a wireless authentication protocol named TBPKI is proposed.In TBPKI,TCVP authenticates a wireless network node（WN） by employing PKI and then generate a CVT for it.Afterwards,WN can testify itself by providing its CVT.TBPKI not only avoids the performance penalty in mobile wireless terminal suffered from online certification validation,but also reduces the number of messages exchanged.Compared with the SSL and WTLS protocols,TBPKI causes less computation and transportation overhead.
出处
《计算机工程与设计》
CSCD
北大核心
2012年第9期3297-3300,共4页
Computer Engineering and Design
基金
中国博士后特别基金项目(201003757)
关键词
无线安全
安全协议
公钥基础设施
身份认证
可信代理
密钥协商
wireless security
security protocol
public key infrastructure（PKI）
identity authentication
trusted proxy
key negotiation
