基于社交网络的智能手机轻型安全认证协议设计

Lightweight smart phone security authentication protocol based on social network

传统的基于PKI的公钥加密认证方式,以其高的计算需求对资源受限的智能终端提出新的挑战。考虑到现实手机通讯网络具有社交网络特点,提出一种基于社交网络的智能手机轻型安全认证协议,使用Kerberos协议分发对称密钥,使用对称加密方式替换原来公钥加密方式,结合用户常用联系人数量小的特性规避了大规模密钥分发和管理问题,并使用BAN逻辑对协议安全性进行形式化分析。实验结果表明,所提协议在智能手机上运行速度快,资源需求量少,终端续航时间长。

for the resource-constrained characteristics of the smart phone,this paper proposes a lightweight smart phone security authentication protocol based on social network against the problem of PKI-based public key encryption for authentication demanding lots of terminal resource.This protocol combines with the features of users having small number of contacts,makes use of symmetric encryption instead of the original asymmetric encryption,distributes symmetric key using the Kerberos protocol,and then uses the BAN logic to conduct a formal analysis of protocol security.Experimental results show that the proposed protocol in the smart phone is faster,with less demand for resources,and has longer life for the terminal.