基于身份的可认证非对称群组密钥协商协议

基于层级化身份的可证明安全的认证密钥协商协议曹晨磊;刘明奇;张茹;杨义先【摘要】目前基于身份的认证密钥协商协议均以单个私钥生成器(PKG)为可信第三方，但这种系统结构难以满足身份分层注册与认证需求。

该文以基于层级化身份的加密(HIBE)系统为基础重构了私钥的组成元素，并利用椭圆曲线乘法循环群上的双线性映射提出一个基于层级化身份的认证密钥协商协议，为隶属于不同层级的云实体提供了安全的会话密钥协商机制。

基于CDH(Computational Diffie-Hellman)与GDH(Gap Diffie-Hellman)假设，该文证明了新协议在eCK模型下具有已知密钥安全性、前向安全性和PKG前向安全性，并且能够抵抗基于密钥泄露的伪装攻击。

%At present most Identity-based authenticated key agreement protocols are built on the security infrastructure in which a single Private Key Generator (PKG) is contained as the only trusted third party of the whole system, however such kind of infrastructure can not satisfy the requirements of hierarchical identity register and authentication. On the basis of Hierarchical Identity Based Encryption (HIBE) system, this paper reconstructs the private key and proposes a new hierarchical identity based authenticated key agreement protocol using the bilinear map in multiplicative cyclic group and it provides secure session key exchange mechanism for cloud entities on different hierarchical levels. Based on the Computational Diffie-Hellman (CDH) and Gap Diffie-Hellman (GDH) assumptions, this paper proves that the new protocol not only achieves known-key security, forward secrecy and PKG forward secrecy, but also resists key-compromise impersonation attacks in the eCK model.【期刊名称】《电子与信息学报》【年(卷),期】2014(000)012【总页数】7页(P2848-2854)【关键词】云计算;认证密钥协商协议;基于身份的密码体制;基于层级化身份的加密;eCK模型【作者】曹晨磊;刘明奇;张茹;杨义先【作者单位】北京邮电大学灾备技术国家工程实验室北京 100876;北京邮电大学灾备技术国家工程实验室北京 100876;北京邮电大学灾备技术国家工程实验室北京 100876;北京邮电大学灾备技术国家工程实验室北京 100876【正文语种】中文【中图分类】TP309云计算是一种模型，用以实现无处不在的、便利的、按需的、通过网络共享的可配置计算资源池，这些资源能够迅速地以最少的管理成本和服务提供商交互进行配置和释放[1]。

优先出版 计 算 机 应 用 研 究 第32卷--------------------------------基金项目：国家自然科学基金资助项目(61003230，61103206)中央高校基本科研业务费专项资金资助(ZYGX2011J063)作者简介：朱国斌(1981-)，男，博士研究生，主要研究方向为密码学与网络安全(zhugb@)；赵洋(1973-)，男，博士，副教授，主要研究方向为信息安全；熊虎(1982-)，男，博士，副教授，主要研究方向为密码学；秦志光(1956-)，男，博士，教授，主要研究方向为网络安全．一个基于身份的密钥隔离认证密钥协商协议 *朱国斌，赵 洋，熊 虎，秦志光(电子科技大学 计算机科学与工程学院，成都 610054)摘 要：鉴于目前已有的基于身份的认证密钥协商协议都未考虑后向安全性，该文结合密钥进化的思想利用椭圆曲线加法群提出了一个基于身份的密钥隔离认证密钥协商协议。

协议去除了双线性对运算，效率比基于双线性对构造的基于身份的协议有较大提高；协议不仅满足目前已知的所有针对认证密钥协商协议的安全性要求，而且还满足后向安全性。

关键词：基于身份的密码体制；认证的密钥协商；后向安全性；密钥隔离 中图分类号：TP309 文献标志码：AID-based key-insulated authenticated key agreement protocolZHU Guo-bin, ZHAO Yang, XIONG Hu, QIN Zhi-guang(College of Computer Science & Engineering, University of Electronic Science & Technology of China, Chengdu Sichuan610054, China)Abstract: In view of the absence of backward security in all existing Identity-based (ID-based) authenticated key agreement protocols, this paper proposes an ID-based key-insulated key agreement protocol from additive elliptic curve group by incorporating the idea of key evolution. Comparing with existing works, our protocol eliminates the pairing operation and thus outperforms the pairing-based ID-based authenticated key agreement protocol. Furthermore, our protocol enjoys both of the known security requirements and the backward security. To the best of author ’s knowledge, this is the first ID-based key-insulated authenticated key agreement protocol in the literature.Key Words: identity-based cryptography; authenticated key agreement; backward security; key-insulated0 引言作为公钥密码学的重要组成部分，密钥协商协议允许两个或多个参与者在开放的网络中通过公开信息交互协商一个共享会话密钥，从而为随后的通信提供安全保证[1-4]。

基于身份的可认证多方密钥协商新方案刘雪艳;张强;王彩芬【摘要】认证密钥协商协议允许通信方在公开的网络环境里进行认证,并协商一个安全的共享会话密钥.在McCullagh-Barreto方案的基础上,提出了一个基于身份的可认证多方密钥协商新方案.引入密钥种子更新临时公私钥对,实现了认证功能,提高了安全性,成功抵抗了Reveal查询攻击和密钥泄漏扮演攻击,且具有无密钥控制、等献性等特性.%Authenticated key agreement protocol allows a group of users in an open network environment to identify each other and share a security session key. This article proposed a new scheme of ID-based authenticated multi-party key agreement based on McCullagh-Barreto scheme. Key seed was introduced to update temporary public/private key pairs. The new scheme is able to realize the authentication, improve the security, resist Reveal query attack and the key compromise impersonation attack successfully, and it has many properties such as non-key control and equal contribution.【期刊名称】《计算机应用》【年(卷),期】2011(031)005【总页数】3页(P1302-1304)【关键词】双线性映射;多方密钥协商;认证;BR93模型;Reveal查询【作者】刘雪艳;张强;王彩芬【作者单位】西北师范大学数学与信息科学学院,兰州730070;西北师范大学数学与信息科学学院,兰州730070;西北师范大学数学与信息科学学院,兰州730070【正文语种】中文【中图分类】TP393.070 引言密钥协商是通信双方或多方在公开的网络环境里通信，协商建立一个安全的共享密钥，为此后的通信提供数据保密性和数据完整性等保护措施的技术［1］。