基于ECC算法的安全芯片增强双向匿名认证方法

Enhanced bidirectional anonymous authentication method for security chip based onECC algorithm

为了解决现有芯片认证方案中,双向通信协议的合法性与唯一性无法保证,导致信息无法完整传输的问题,提出了基于ECC算法的安全芯片增强双向匿名认证方法。设计芯片安全增强结构,计算用户、权威机构密钥,验证传输信息可靠性,以此保证会话密钥分配的安全性。由发送端芯片A向接收端芯片B发送证书,实现证书交换。发送端芯片A根据一定概率推断出接收端芯片B的身份,结合字符实现双向隐匿。设计双向“挑战—应答”机制,根据响应协议,保证了双向通信协议合法性与唯一性,以及信息的完整传输。由实验结果可知,所研究方法在重放攻击情况下能完整传输信息,在口令猜测攻击情况下丢失了[2,7]、[4,5]、[5,5]、[6,6]位置的信息,不能完整传输。

In order to solve the problem of incomplete information transmission caused by the inability to guarantee the legality and uniqueness of bidirectional communication protocols in existing chip authentication schemes,a secure chip enhanced bidirectional anonymous authentication method based on ECC algorithm is proposed.Design a chip security enhancement structure,calculate user and authoritative organization keys,verify the reliability of transmission information,and ensure the security of session key distribution.Send certificates from the sending chip A to the receiving chip B to achieve certificate exchange.The sending chip A infers the identity of the receiving chip B based on a certain probability,and combines it with characters to achieve bidirectional concealment.Design a bidirectional“challenge response”mechanism,based on the response protocol,to ensure the legality and uniqueness of the bidirectional communication protocol,as well as the complete transmission of information.It can be seen from the experimental results that the research method can completely transmit information in the case of Replay attack,but can not completely transmit information in the case of password guessing attack because the information of[2,7],[4,5],[5,5],[6,6]locations is lost.