| 摘要: |
| 在Waters 的基于身份加密方案的基础上提出了一种高效的基于身份认证密钥协商协议,并在标准模型下证明了该协议的安全性.与目前已有的同类协议相比,该协议具有更高的效率和更弱的安全假设,并具有已知密钥安全和前向安全性等安全性质,同时能够抵抗未知密钥共享和密钥泄露伪装攻击.在该协议基础上,构造了防止用户密钥生成中心获取会话密钥的协议,以满足需要防止密钥托管的应用需求,并采用安全的消息认证码算法为该协议增加了密钥确认过程. |
| 关键词: 认证 密钥协商 基于身份 可证明安全 标准模型 |
| DOI：10.3724/SP.J.1001.2011.03828 |
| 分类号: |
| 基金项目:国家自然科学基金(60673083, 60803129); 江苏省网络与信息安全重点实验室资助项目(BM2003201); 国家发改委2008 年下一代互联网业务试商用及设备产业化专项(CNGI-09-03-03) |
|
| Efficient Identity-Based Authenticated Key Agreement Protocol in the Standard Model |
|
GAO Zhi-Gang, FENG Deng-Guo
|
|
State Key Laboratory of Information Security, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China
|
| Abstract: |
| This paper proposes an efficient Identity-Based authenticated key agreement protocol based on Waters’ Identity-Based Encryption scheme and gives a detail security analysis with provable security techniques in the standard model. It is more efficient than other similar protocols, and provides known-key security and forward secrecy. And it also resists key-compromise impersonation and unknown key share attacks. Moreover, this protocol is extended to satisfy the requirement that the session key should be escrowed by the Private Key Generation (PKG) center, and is given a key confirmation property with a secure message authentication code algorithm. |
| Key words: authentication key agreement identity-based provable security standard model |
