科研成果详情

基于票据（Ticket）提出一个实用的移动网络匿名认证协议.协议分为两个阶段:票据产生阶段与漫游认证阶段.协议在票据产生阶段不需要访问服务器参与,且在漫游认证阶段不需要归属服务器参与,因此交互轮数少;协议使用椭圆曲线Diffie-Hellman（ECDH）协议进行密钥协商、使用椭圆曲线公钥加密（ECC）对认证消息进行加密并使用椭圆曲线数字签名算法（ECD-SA）来产生及认证票据,因此具有较高的效率;同时协议利用CK模型进行形式化设计,具有会话密钥安全性（SK-secure）.分析表明,该协议能够为移动网络提供用户匿名性的同时,终端计算时间仅是基于群签名的协议的三分之一左右,且满足票据可多次使用,因此适用于大规模的实际应用. 

Proposed a practical anonymous authentication protocol based on ticket under CK model for mobile networks. The protocol includes two phases: ticket issue phase and roaming authentication phase. The protocol has the following advantages: no visited server is needed in first phase, and no home server is needed in second phase, so message flows are few; the protocol makes use of elliptic curve Diffie-Hellman (ECDH) , elliptic curve cryptography (ECC) and elliptic curve digital signature algorithm (ECDSA) to exchange session key, encrypt messages, issue and authenticate tickets respectively, so it has high efficiency; it is designed under CK model, so it is session key secure (SK-secure) . Analysis shows that the terminal computation time in our protocol is only one third of that in the protocol based on group signature, and the ticket can be used repeatedly while providing user anonymity for mobile networks, so our new protocol is appropriate for practical application.