基于可信第三方的身份认证密钥协商协议

Key Negotiation Protocol of Identity Authentication based on Trusted Third Party

随着互联网中通信实体数量的增多,多通信实体在实际应用中受传统"用户—服务器"密钥协商协议制约愈发突出。一种基于可信第三方的身份认证密钥协商协议,可以通过引入可信第三方协助通信双方生成共享会话密钥,利用双线性映射、哈希函数和Diffie-Hellman协议加强消息传输安全,并从抵抗假冒攻击、重放攻击、离线猜测攻击、口令猜测在线攻击和前向安全性等方面进行安全分析,实现多用户之间的双向身份认证。

With the increasing number of communication entities in the Internet,multiple communication entities are increasingly restricted by the traditional"user-server"key negotiation protocol in practical applications.a key negotiation protocol based on trusted third party is proposed in this paper.This protocol generates shared session keys by introducing a trusted third party,and be used to enhance message transmission security by using bi-linear mapping,hash function and Difier-Hellman protocol,and security analysis was carried out from several aspects,such as resistance to fake attack,replay attack,offline guessing attack,online password guessing attack and forward security.The bidirectional identity authentication between multiple users is realized.