动态对等群上的基于身份的认证密钥协商协议

动态对等群上的基于身份的认证密钥协商协议 ID-Based Authenticated Key Agreement Protocol in Dynamic Peer Groups 汪小芬 WANG Xiaofen 1 first-author 谭示崇 TAN Shichong 1 董庆宽 DONG Qingkuan 1 肖国镇 XIAO Guozhen 1 西安电子科技大学综合业务网国家重点实验室 西安电子科技大学综合业务网国家重点实验室 State Key Laboratory of Integrated Service Networks,Xidian University State Key Laboratory of Integrated Service Networks,Xidian University 针对DB08协议（Dutta和Barua的动态群密钥协商协议）不满足密钥独立性的缺陷,利用SK（Sakai和Kasahara）的密钥构造方法,提出了一个动态对等群上的基于身份的认证密钥协商协议.在新协议中计算子密钥时,利用Hash运算和增加会话标识,来避免不同会话中子密钥的关联性,因此新协议满足密钥独立性.同时新协议满足完善的前向安全性、主密钥前向安全性,以及抗主动和被动攻击等安全性.与DB08协议相比较,新协议大大降低了计算开销和通信开销,因此更适用于动态的对等网络. The two round dynamic group key agreement protocol（DB08 protocol） proposed by Dutta and Barua doesn’t provide key independence.To improve DB08 protocol,an ID-based authenticated key agreement protocol in dynamic peer groups is presented by using Sakai R and Kasahara M’s key construction.To avoid the correlation of the sub-keys for different sessions,hash functions and session identifiers are included while computing the sub-keys in the new protocol.So the new protocol achieves key independence,and it provides perfect forward secrecy,KGC-forward secrecy and resistance to passive and active attacks as well.Compared with DB08 protocol,the computation and communication costs are greatly reduced in the new protocol.So the new protocol is more efficient and applicable for dynamic peer network. 认证密钥协商 密钥独立性 完善前向安全性 主密钥前向安全性 对等网络 authenticated key agreement key independence perfect forward secrecy KGC-forward secrecy peer network TN918.1 国家自然科学基金（60473028,60603010）;陕西省自然科学基金资助项目（2006F19） 2008-05-01 2021-04-01 5