AN AUTHENTICATION AND SESSION KEY AGREEMENT PROTOCOL BASED ON IDENTITY SIGNATURE

摘要：

A new authentication and session key agreement protocol based on identity signature is proposed. The proposed protocol is composed of four parts: the registration of users, user identity initialization, the authentication of user’s identity and the generation of session key. The proposed system involves three partners, user A, user B and the trusted party (TP). The existence of TP prevents the man-in-middle attack. During the generation of session key, TP is allowed to be offline. Our protocol combines the public key with the identity of user, and makes it feasible that the network identity of a user is represented by the public key. The generation of private key and session key is accomplished by user alone, without the participation of a TP. During the generation of session key, the users authenticate the identity of each other using the corresponding user signatures. The authentication is performed without the participation of a TP, thus reducing the risk of exposing of the master key. The proposed protocol is highly efficient and secure.

关键词： Identity signature Identity authentication Session key agreement protocol

作者: Ning Li Tet Yeap Chongxiu Yu

作者单位: Electronic Engineering School, Beijing University of Posts and Telecommunications, Beijing 100876, C Faculty of Engineering, University of Ottawa, Canada

会议类型: 国际会议

会议名称: China-Ireland International Conference on Information and Communications Technologies 2008(2008 中国-爱尔兰信息与通信技术国际会议 CIICT 2008)

会议地点: 北京

会议语种:英文

页码: 1-5

在线出版日期: 2008-09-26（万方平台首次上网日期，不代表论文的发表时间）