| 摘要: |
| 基于属性的认证密钥协商(attribute-based authenticated key agreement,简称ABAKE)协议可在保护身份隐私的通信环境中为用户建立共享的会话密钥,ABeCK(attribute-based extended Canetti-Krawczyk)模型是适用于ABAKE协议安全性分析的一种安全强度较高的模型.首先在GCDH(gap computational Diffie-Hellman)假设的基础上提出了GCPBDHE(gap computational parallel bilinear Diffie-Hellman exponent)假设,然后,基于Waters属性基加密方案提出了一个基于属性的认证密钥协商协议,并在GCPBDHE假设和CDH假设成立的条件下,证明了该方案在ABeCK模型下是安全的.与现有的ABeCK模型下安全的ABAKE协议相比,降低了通信开销. |
| 关键词: 基于属性 密钥协商 ABeCK 模型 GCDH 假设 GCPBDHE 假设 |
| DOI:10.13328/j.cnki.jos.004825 |
| 分类号: |
| 基金项目:国家自然科学基金(61272488,61272041,61202491) |
|
| Attribute-Based Authenticated Key Agreement Protocol Secure in ABeCK Model |
|
GAO Hai-Ying
|
|
The PLA Information Engineering University, Zhengzhou 450001, China
|
| Abstract: |
| Attribute-based authenticated key agreement(ABAKA) protocol is used to establish session key among parties in the communication environment in which the identity information of individual is protected. Attribute-based extended Canetti-Krawczyk(ABeCK) model is a model with more security applying to the security proof of ABAKE protocol. This paper presents gap computational parallel bilinear Diffie-Hellman exponent(GCPBDHE) assumption based on gap computational Diffie-Hellman(GCDH) assumption. Based on Waters scheme, it establishes an ABAKA protocol, and proves its security in ABeCK model under GCPBDHE and CDH assumptions. Compared with the existing ABAKE protocols, the new protocol is more efficient in communication cost. |
| Key words: attribute-based key agreement ABeCK model GCDH assumption GCPBDHE assumption |