Key establishment protocols for secure mobile communications A selective survey文档.pdf

Key Establishment Protocols for Secure Mobile Communications: A Selective Survey Colin BoydI and Anish Mathuria2 Information Security Research Centre, School of Data Communications Queensland University of Technology,Brisbane Q4001 AUSTRALIA boyd@f it. qut. edu. au 2 IBM Research, Tokyo Research Laboratory 1623-14, Shimotsuruma, Yamato-shi Kanagawa-ken 242-0001 JAPAN anish@trl, ibm. co. jp Abstract. We analyse several well-known key establishment protocols for mobile communications. The protocols are examined with respect to their security and suitability in mobile environments. In a number of cases weaknesses are pointed out, and in many cases refinements are suggested, either to improve the efficiencyor to allow simplified security analysis. 1 I n t r o d u c t i o n Security is a critical issue in mobile radio applications, both for the users and providers of such systems. Although the same may be said of all communica- tions systems, mobile applications have special requirements and vulnerabilities, and are therefore of special concern. Once a call has been set up by establishing various security parameters, the problem is reduced to that of employing appro- priate cryptographic algorithms to provide the required security services. The most important problem is undoubtedly that of designing protocols for authen- tication and key management as part of the call set-up process; security-critical errors made at this stage will undermine the security of the whole of the session, and possibly subsequent sessions as well. The problem of designi