社交网络下智能手机轻型安全认证协议的BAN逻辑安全性分析

BAN logical security analysis of smart phone light security authentication protocol in social network

传统公钥加密认证方式具有较高的计算需求,从而对智能终端提出了全新的挑战。因为现代手机网络具有社交网络功能,所以就提出了一种社交网络下智能手机轻型安全认协议。通过相应的逻辑推导,表示认证协议协议具有一定的缺陷,会出现伪装攻击。之后对其进行分析,使用BAN逻辑安全性实现安全认证协议的加密方式,根据用户常用的联系人数量较少的特点避免了协议出现大规模密钥发布和管理的问题。通过实验研究结果表示,所提出的协议能够在智能手机中运行,并且使用的资源较少,终端的续航时间较长。

Traditional public key encryption authentication methods have higher computing requirements,which brings new challenges to intelligent terminals.Because modern mobile networks have social networking capabilities,they propose a lightweight security protocol for smartphones under social networking.Through the corresponding logic deduction,it indicates that the authentication protocol has some defects,and masquerade attack will occur.After analyzing the BAN logic to achieve security authentication protocol encryption method,according to the characteristics of users used fewer contacts to avoid the emergence of large-scale key agreement release and management problems.The experimental results show that the proposed protocol can run in smart phones,and has less resource usage and longer terminal lifetime.