| 摘要: |
| 随着5G技术的快速发展, 5G-AKA协议作为5G技术的核心安全机制, 受到广泛关注. 5G-AKA协议的部署推动了通信网络的高速互联, 但也带来了用户对隐私泄露的担忧. 运营商在协议交互过程将收集大量数据, 这些数据一旦泄露, 将给用户造成严重的威胁. 因此, 提出基于SM2的匿名认证与密钥协商协议, 实现用户认证过程的隐私增强, 达到用户信息的最小揭露. 扩展了国密SM2数字签名算法实现对多消息的签名, 结合ElGamal算法对用户的身份进行加密并利用零知识证明技术保证用户证书的匿名性, 有效实现对用户身份的匿名认证. 协议保护合法用户在网络活动中的身份隐私, 并有效阻断对用户信息的非法获取. 此外, 协议还具备对恶意用户的可追责性, 其允许经授权的监管机构在合法流程下还原出用户身份. 最后, 开展协议实验测评, 基于Windows及Raspberry Pi 4B平台上进行部署和实现. 测评结果显示, 匿名认证与密钥协商过程耗时均为毫秒级, 充分展示了所提协议的高效性与实用性. |
| 关键词: 5G-AKA 匿名认证 SM2数字签名 隐私保护 |
| DOI：10.13328/j.cnki.jos.007502 |
| 分类号:TP309 |
| 基金项目:国家重点研发计划(2022YFB2701500); 国家自然科学基金 (62272385, 62202375); 陕西省杰出青年基金(2022JC-47); 陕西省重点研发计划(2024GX-ZDCYL-01-09, 2024GX-ZDCYL-01-15); 陕西省科协青年人才托举计划(20220134); 陕西省高校青年创新团队(24JP180) |
|
| Anonymous Authentication and Key Agreement Protocol Based on SM2 |
|
ZHAO Xuan1, ZHAO Yan-Qi1, SUN Ming-Hong1, YU Yong2
|
|
1.School of Cyberspace Security, Xi’an University of Posts & Telecommunications, Xi’an 710121, China;2.School of Computer Science, Shaanxi Normal University, Xi’an 710119, China
|
| Abstract: |
| With the rapid development of 5G technology, the 5G-AKA protocol, as the core security mechanism of 5G technology, has caught widespread attention. Although the deployment of the 5G-AKA protocol has promoted the high-speed interconnection of communication networks, it has also raised users’ concerns about privacy leakage. During the protocol interaction, operators will collect a large amount of data, and once the data is leaked, it will pose a serious threat to users. Therefore, this study proposes an anonymous authentication and key agreement protocol based on SM2 to enhance the privacy of the user authentication process and minimize the disclosure of user information. It extends the Chinese cryptographic SM2 digital signature algorithm to achieve the signature of multiple messages, combines the ElGamal algorithm to encrypt the user’s identity, and adopts zero-knowledge proof technology to ensure the anonymity of the user credentials, thereby achieving the anonymous authentication of the user’s identity. The protocol protects the identity privacy of legitimate users in network activities and effectively blocks the illegal acquisition of user information. Additionally, the protocol holds the accountability for malicious users, allowing authorized regulatory agencies to restore the user’s identity in a legal process. Finally, protocol experimental evaluations are conducted, with deployment and implementation carried out on Windows and Raspberry Pi 4B platforms. The evaluation results show that the consumed time of the anonymous authentication and key agreement process is at the millisecond level, fully demonstrating the efficiency and practicality of this protocol. |
| Key words: 5G-AKA anonymous authentication SM2 digital signature privacy protection |
