论文部分内容阅读
基于票据(Ticket)提出一个实用的移动网络匿名认证协议.协议分为两个阶段:票据产生阶段与漫游认证阶段.协议在票据产生阶段不需要访问服务器参与,且在漫游认证阶段不需要归属服务器参与,因此交互轮数少;协议使用椭圆曲线Diffie-Hellman(ECDH)协议进行密钥协商、使用椭圆曲线公钥加密(ECC)对认证消息进行加密并使用椭圆曲线数字签名算法(ECD-SA)来产生及认证票据,因此具有较高的效率;同时协议利用CK模型进行形式化设计,具有会话密钥安全性(SK-secure).分析表明,该协议能够为移动网络提供用户匿名性的同时,终端计算时间仅是基于群签名的协议的三分之一左右,且满足票据可多次使用,因此适用于大规模的实际应用.
Based on Ticket, a practical mobile network anonymous authentication protocol is proposed.The protocol is divided into two phases: ticket generation phase and roaming authentication phase, which does not require access to the server during ticket generation and does not require home server during roaming authentication phase So the number of rounds of interaction is small. The protocol uses the ECDH protocol for key agreement, uses elliptic curve public key cryptography (ECC) to encrypt the authentication message and uses ECD-SA (Elliptic Curve Digital Signature Algorithm) To generate and authenticate the ticket, so it has higher efficiency.At the same time, the protocol is formally designed with CK model and has the session key security (SK-secure) .The analysis shows that this protocol can provide the user’s anonymity for the mobile network , Terminal computing time is only about one-third of the group-based protocol, and the ticket can be used repeatedly, thus it is suitable for large-scale practical application.