身份与位置分离网络中的可证明三元认证接入协议

Provably Secure Three-Elements Peer Access Authentication Protocol in Identifier/Locator Separation Network

针对身份与位置分离网络中接入协议的安全问题,提出一种可证明的三元认证接入协议,实现了所有通信实体(终端、接入交换路由器和认证服务器)的双向认证,有效地防止了未授权终端的接入,防止了伪造的认证服务器和非法的接入交换路由器.通过对Ballare-Rogaway模型的扩展和性能分析可知,该协议基于BR扩展模型是可证明安全的.

Aiming at assuring the authenticity and creditability of the terminals in identifier/locator separation network,a provably secure three-elements peer access authentication protocol( PSTAAP) protocol was proposed. This protocol realized mutual authentication among all the communicating entities in the network( including terminal,access switch network and authentication center). It can effectively block unauthorized terminals to access the network,and can prevent unauthentic authentication center and access switch router from cheating the terminal. It was verified that this protocol was provably security based on Ballare-Rogaway extended model and performance analysis.