摘要
对现有基于身份的一次性公钥及签名算法进行改进,通过改变一次性公钥密钥参数、验证和匿名性撤销的计算方式,减少双线性运算次数,在保证安全性的基础上降低计算开销,基于该算法设计一种无线网络切换认证方案,方案只需在接入点和移动节点间进行通信,即可完成双向认证,在提供强匿名性的同时,可防止移动节点的恶意行为.分析表明,方案同时具有安全性和效率上的优势,更加适合在无线网络环境下应用.
An improved signature scheme with the one-off public key is proposed based on identity-based cryptography,which reduces the number of bi-linear pairing operations through changing the key parameters and the way of verification and anonymity revocation.It reduces the computation cost without losing any security features.A handover authentication scheme is constructed by combining the proposed signature scheme.It can complete mutual authentication only through the communication between the access point and the mobile node.Furthermore, It can realize strong anonymity and prevent malicious acts of the mobile node.It is shown that the proposed scheme has superiority in both security and efficiency,and is more suitable for wireless networks.
作者
霍士伟
杨恒
田八林
刘许刚
HUO Shiwei;YANG Heng;TIAN Balin;LIU Xugang(Information and Communications Institute Training and Experiment Base.National University of Defense Technology.Xi'an 710106.China)
出处
《信息工程大学学报》
2018年第5期545-549,共5页
Journal of Information Engineering University
关键词
无线网络
切换认证
一次性公钥
匿名性
wireless networks
handover authentication
one-off public key
anonymity