大规模延迟容忍网络中基于分级身份的认证密钥协商协议

Hierarchical identity based authentication key agreement in large-scale delay tolerant networks

大规模延迟容忍网络具有覆盖范围广、链路间歇性连通及通信时延长等特点,这使得现有认证密钥协商协议存在系统管理瓶颈及通信时延长等问题。设计了一种适用于大规模延迟容忍网络环境下的认证密钥协商协议,依赖基于分级身份的密码机制,通过密钥分级派生,减少系统管理瓶颈,同时消除对证书的依赖,减少协商时延。与现有通用环境下基于分级身份的同类协议相比,该协议的通信开销及双线性对计算开销较小,且均为常量,不受节点层次数影响,可扩展性更强,并且具有密钥派生控制功能。最后,在标准模型下证明了协议的安全性。

Large-scale delay tolerant network has the character of large scale deployment, long intermittent connection and communication delays. The traditional authentication key agreement schemes have the problem of management bottleneck and long communication delay. This paper proposed an authentication key agreement protocol for large-scale delay tolerant networks using hierarchical identity based cryptography. The protocol avoided management bottleneck by key delegating generation, and reduced communication delay by removing certification. Compared with other similar protocols, the communication and bilinear pairing computations overhead of the proposed protocol are small and constant. It is attractive in the environment of large delay tolerant network. It proved the security of the protocol in the standard model.