基于层级化身份的可证明安全的认证密钥协商.pdfVIP

第36 卷第12 期 电 子 与 信 息 学 报 Vol.36No.12 2014 年12 月 Journal of Electronics Information Technology Dec. 2014 基于层级化身份的可证明安全的认证密钥协商协议 曹晨磊* 刘明奇 张 茹 杨义先 (北京邮电大学灾备技术国家工程实验室 北京 100876) 摘 要：目前基于身份的认证密钥协商协议均以单个私钥生成器(PKG)为可信第三方，但这种系统结构难以满足身 份分层注册与认证需求。该文以基于层级化身份的加密(HIBE)系统为基础重构了私钥的组成元素，并利用椭圆曲 线乘法循环群上的双线性映射提出一个基于层级化身份的认证密钥协商协议，为隶属于不同层级的云实体提供了安 全的会话密钥协商机制。基于CDH(Computational Diffie-Hellman)与GDH(Gap Diffie-Hellman)假设，该文证明 了新协议在eCK 模型下具有已知密钥安全性、前向安全性和PKG 前向安全性，并且能够抵抗基于密钥泄露的伪 装攻击。 关键词：云计算；认证密钥协商协议；基于身份的密码体制；基于层级化身份的加密；eCK 模型 中图分类号：TP309 文献标识码：A 文章编号：1009-5896(2014)12-2848-07 DOI: 10.3724/SP.J.1146.2014.00684 Provably Secure Authenticated Key Agreement Protocol Based on Hierarchical Identity Cao Chen-lei Liu Ming-qi Zhang Ru Yang Yi-xian (National Engineering Laboratory for Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing 100876, China) Abstract: At present most Identity-based authenticated key agreement protocols are built on the security infrastructure in which a single Private Key Generator (PKG) is contained as the only trusted third party of the whole system, however such kind of infrastructure can not satisfy the requirements of hierarchical identity register and authentication. On the basis of Hierarchical Identity Based Encryption (HIBE) system, this paper reconstructs the private key and proposes a new hierarchical identity based authenticated key agreement protocol using the bilinear map in multiplicative cyclic group and it provides secure session key exchange mechanism for cloud entities on differ