IBAKA (Identity Based Authentication and Key Agreement) method

Abstract

The invention discloses an IBAKA (Identity Based Authentication and Key Agreement) method. The method comprises the following steps that: a user at a sending terminal generates first authentication data for authenticating the identity of the user at the sending terminal and sends the first authentication data to a user at a receiving terminal; the user at the receiving terminal carries out legality authentication on the identity of the user at the sending terminal according to the received first authentication data; if authenticating that the identity of the user at the sending terminal is legal, the user at the receiving terminal generates second authentication data which does not contain key information of the user at the sending terminal, sends the second authentication data to the user at the sending terminal and generates a conversation key of the receiving terminal; the user at the sending terminal carries out legality authentication on the identity of the user at the receiving terminal according to the received second authentication data; and if the identity of the user at the receiving terminal is authenticated to be legal by a sensing terminal, the user at the sending terminal generates a conversation key of the sending terminal. The method disclosed by the invention can be used for solving the problem that a risk of denial of service attack, key leakage impersonation attack or temporal key leakage attack exists in an IBAKA protocol.

Description

technical field [0001] The invention relates to the field of information security and communication technology, in particular to an identity-based public key cryptosystem and an authentication key agreement method using elliptic curve bilinear mapping for two-party entities and in a distributed environment. Background technique [0002] Authentication key agreement is a basic primitive in cryptography. By negotiating session keys, various functions can be realized, such as identity authentication, key confirmation, data encryption, etc. Research on efficient and feasible secure authentication key agreement protocols is also a distributed network Safety important ingredient. [0003] The cryptographic system based on public key infrastructure (PKI) has the disadvantages of high computational cost and large storage overhead. In order to simplify PKI, Shamir proposed the concept of identity (ID) cryptographic system. Users use their own ID information such as email, telephone ...

AI Technical Summary

Problems solved by technology

Although legal entities can use the negotiated session key for identity verification or key confirmation to reject illegal entities, communication participants need at least three message interactions, and the communication overhead is relatively large, so the research requires two message interactions with rejection The IBAKA protocol with illegal user function has important theoretical value and practical significance for secure communication

[0005] In 2007, Chen et al. improved the CK protocol (the authenticated key agreement protocol proposed by Chen, Kudla, etc.), and proposed an enhanced CK protocol (eCK for short), which not only satisfies all the security properties of the key agreement protocol , and can reject illegitimate entities that do not abide by the protocol, but are powerless against attackers who understand the protocol

However, this scheme has the risk of masquerading attack and ephemeral key disclosure attack.

[0007] In 2009, based on the consideration of protecting user privacy, Cao Tianjie et al proposed an authenticated key agreement protocol that enhances user privacy. Three message interactions are required, and the communication cost is relatively high

[0008] In 2011, Holbl et al. designed a more secure authenticated key agreement scheme based on the signature scheme of Hess. The protocol satisfies the basic security properties and can resist key leak masquerading attacks, but the scheme also has the possibility of temporary key leak attacks. threaten

[0028] The IBAKA-S protocol uses the point multiplication of the temporary key and the temporary public key of the other party in the calculation of the session key, so it can satisfy the perfect forward security of the session key; however, Hou et al. proposed the security of the temporary key disclosure attack in 2010 Attribute: The disclosure of the temporary key of both communication parties cannot leak the session key, and the session key of the IBAKA-S protocol depends on the temporary key, so it cannot resist this attack

Images