Two-party key agreement method based on self-certified public key

Abstract

The invention discloses a two-party key agreement method based on a self-certified public key, mainly solving the complicated certificate management problem in the traditional PKI technology to realize the self-certified two-party key share and reduce the network resource expenses. The method comprises the following steps of: allocating shared keys to n virtual central nodes by utilizing a threshold cryptology; selecting an individual secret random number by one party of a session, calculating public parameters, sending the individual identity and the public parameters to a virtual center to apply an individual self-certified public key; selecting an individual secret random number by the other one party of the session, calculating public parameters, sending the individual identity and the public parameters to the virtual center to apply an individual self-certified public key; after mutually exchanging the self-certified public key, the identity and the public parameters by two parties of the session, respectively calculating the shared session key. In the invention, a light code ECC is used as a theoretical basis without the certificate management, the key escrow and the safe signal path, so that the man-in-the-middle attack can be resisted, and the invention is suitable for the mobile self-organization network safety communication with the limited resources.

Description

technical field [0001] The invention belongs to the technical field of network security, and relates to self-authentication public key and session key negotiation, specifically, a two-party key negotiation method based on self-authentication public key, which can provide communication network security and trust system establishment. Basic technical support, especially suitable for mobile ad hoc networks. Background technique [0002] Session key partitioning is one of the most important applications of public key cryptography. Using public key cryptography, Alice and Bob can negotiate session keys in an open network environment. [0003] There are currently three modes of public key cryptosystems that session key negotiation relies on: certificate-based, identity-based, and self-authenticated. The certificate-based model is based on the public key infrastructure (PKI), and there are complex certificate management problems. The identity-based mode directly uses the user's i...

AI Technical Summary

Problems solved by technology

Compared with the traditional network, the mobile ad hoc network has the characteristics of dynamic topology, limited node performance, distributed control, no center and poor security.

However, there are still the following problems in the application of two-party key agreement based on self-certified public keys in mobile ad-hoc networks: (1) There must be a central server in the network to generate self-certified public keys for users; (2) A secure channel is required to transmit secret information ; (3) The amount of calculation and communication is relatively large; (4) There is key escrow

Among them, the first two problems are unrealizable in mobile ad hoc networks, and the latter two problems are also unreasonable for such resource-constrained networks, so they need to be avoided as much as possible.

[0006] In the mobile ad hoc network, there is no method of session key agreement between the two parties based on the self-authenticated public key mode

Images