安全高效的无线网络切换认证方案

Secure and Efficient Handover Authentication Scheme in Wireless Networks

对现有基于身份的一次性公钥及签名算法进行改进,通过改变一次性公钥密钥参数、验证和匿名性撤销的计算方式,减少双线性运算次数,在保证安全性的基础上降低计算开销,基于该算法设计一种无线网络切换认证方案,方案只需在接入点和移动节点间进行通信,即可完成双向认证,在提供强匿名性的同时,可防止移动节点的恶意行为.分析表明,方案同时具有安全性和效率上的优势,更加适合在无线网络环境下应用.

An improved signature scheme with the one-off public key is proposed based on identity-based cryptography,which reduces the number of bi-linear pairing operations through changing the key parameters and the way of verification and anonymity revocation.It reduces the computation cost without losing any security features.A handover authentication scheme is constructed by combining the proposed signature scheme.It can complete mutual authentication only through the communication between the access point and the mobile node.Furthermore, It can realize strong anonymity and prevent malicious acts of the mobile node.It is shown that the proposed scheme has superiority in both security and efficiency,and is more suitable for wireless networks.