• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2012, Vol. 34 ›› Issue (10): 38-42.

• 论文 • 上一篇    下一篇

一种基于TTP的两方认证密钥交换协议

周慧华1,2   

  1. (1.湖北民族学院计算机科学与技术系,湖北 恩施 445000;2.华中科技大学计算机科学与技术学院,湖北 武汉 430074)
  • 收稿日期:2012-04-25 修回日期:2012-07-10 出版日期:2012-10-25 发布日期:2012-10-22
  • 基金资助:

    国家自然科学基金资助项目(61173175);

A TwoParty Authenticated Key Exchange Protocol Based on TTP

ZHOU Huihua1,2   

  1. (1.Department of Computer Science and Technology,Hubei University for Nationalities,Enshi 445000;2.School of Computer Science and Technology,Huazhong University of Science and  Technology,Wuhan 430074,China)
  • Received:2012-04-25 Revised:2012-07-10 Online:2012-10-25 Published:2012-10-22

摘要:

本文提出了一种适合大规模C2C通信环境的两方密钥交换TTPTPAKE协议,协议中的每个通信实体和可信中心共享一个可记忆的口令,然后在该可信第三方的帮助下,每对通信实体生成他们的会话密钥。该协议只需四轮通信,不需棘手的公钥基础设施作为支撑,具有较高的计算和通信效率。在随机预言模型和理想密文系统下,形式化地证明了TTPTPAKE协议具备AKE安全。

关键词: 信息安全, 密钥交换, 口令认证, 可证安全

Abstract:

In this paper, a TTPbased twoparty authenticated key exchange (TTPTPAKE) protocol is proposed. It is suitable for largescale clienttoclient communication environments. This protocol can be completed in five steps and four rounds, and communicating entities can authenticate each other and establish a session key through a trusted thirdparty. A formal proof is presented to demonstrate the AKE security of the proposed TTPTPAKE protocol in the ideal cipher model and random oracle model.

Key words: information security;key exchange;passwordbased authentication;provably security