基于移动网络的端到端密钥协商协议

End-to-end key agreement based on mobile network

虽然3G网络的安全机制扩展到核心网络,但是并没有实现端到端安全.基于自生成证书公钥密码体制,设计一种端到端密钥协商协议,只需要一个消息交换就可以建立安全的三方会话密钥.安全性分析结果表明:基于移动网络的端到端密钥协商协议能够解决密钥管理及第三方无举证窃听,与其他密钥协商协议相比,具有较好的安全性,为端到端加密在移动通信系统中的大规模应用提供基础.

Although the security mechanism's extension of 3G network has reached the core network,it doesn't realize the security of end to end.Therefore the research of security which is based on mobile network application is an urgent and important task,and the confidentiality of end to end is the key to it.This article is about designing an end to end key agreement protocol based on the system of self-generated certificate and public key password.This protocol builds a security tripartite session key only need one round message exchange,which can strongly overcome the key escrow and offer perfect forward secrecy.Security analysis result shows that this article's design of key agreement algorithm can solve key management problem and the interception which can not be proved.Compared with existing key agreement protocol,the newly proposed key agreement protocol has better security.Thus,this mechanism lays a foundation for extensive practical application of end-to-end encryption in mobile communication.