Certificate-based cross-domain authentication scheme with anonymity

Yongshan DING; Lixin LI; Zuohui LI

doi:10.11959/j.issn.2096-109x.2018040

您当前的位置：

首页 >

文章列表页 >

Certificate-based cross-domain authentication scheme with anonymity

Papers | 更新时间：2024-06-03

- Certificate-based cross-domain authentication scheme with anonymity
- Chinese Journal of Network and Information Security Vol. 4, Issue 5, Pages: 32-38(2018)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018040
  CLC： TP309
- Online First：2018-05，
  
  Published：15 May 2018
- 稿件说明：
移动端阅览
Yongshan DING, Lixin LI, Zuohui LI. Certificate-based cross-domain authentication scheme with anonymity[J]. Chinese Journal of Network and Information Security, 2018, 4(5): 32-38.
DOI：

Yongshan DING, Lixin LI, Zuohui LI. Certificate-based cross-domain authentication scheme with anonymity[J]. Chinese Journal of Network and Information Security, 2018, 4(5): 32-38. DOI： 10.11959/j.issn.2096-109x.2018040.

摘要

针对物联网中移动设备的跨域认证问题，提出一种基于证书的匿名跨域认证方案。首先，结合PKI和IBS的相关特性，提出一种基于证书的签名（CBS

certificate based signature）方案，并对提出的CBS方案的安全性进行了证明。方案中签名的验证结果为常量，保证跨域过程中认证实体的匿名性。该签名方案不仅避免了复杂的对运算，而且避免了传统PKI中复杂的证书管理和IBS中的密钥托管和分发问题。然后，基于CBS方案设计了一种适用于移动设备的跨域认证方案，该算法能在安全、高效的同时保证认证的匿名性。最后，同其他跨域认证方案进行了对比，对比结果表明，所提方案具有更强的安全性和更小的计算和通信开销，为计算能力和功率受限的移动设备进行跨域认证提供了一种较为实用的解决方案。

Abstract

Considered the cross-domain authentication of mobile devices in the Internet of things

a certificate based anonymous cross-domain authentication scheme was proposed.First

combined with the characteristics of PKI and IBS

a certificate based signature (CBS) algorithm was proposed，and the security of the proposed CBS scheme was proved.The verification result of the signature in the algorithm was constant

which ensured the anonymity of the authentication entities in the cross-domain process.The algorithm does not contain pairing

and avoids complex certificate management in traditional PKI and the key escrow and distribution of IBS.Then a cross-domain authentication scheme for mobile devices was constructed by combining the proposed signature algorithm.The scheme ensures the anonymity of authentication at the same time.Finally

compared with other schemes

the scheme proposed is more secure and has less computation cost and communication cost.Moreover

the scheme is simple and efficient

and could be applied to the cross-domain authentication of mobile devices.

关键词

Keywords

references

ROMAN R , ZHOU J , LOPEZ J . On the features and challenges of security and privacy in distributed internet of things [J ] . Computer Networks , 2013 , 57 ( 10 ): 2266 - 2279 .

武传坤 . 物联网安全关键技术与挑战 [J ] . 密码学报 , 2015 , 2 ( 1 ): 40 - 53 .

WU C K . An overview on the security techniques and challenges of the Internet of things [J ] . Journal of Cryptologic Research , 2015 , 2 ( 1 ): 40 - 53 .

张玉清 , 周威 , 彭安妮 . 物联网安全综述 [J ] . 计算机研究与发展 , 2017 , 54 ( 10 ): 2130 - 2143 .

ZHANG Y Q , ZHOU W , PENG A N . Survey of Internet of things security [J ] . Journal of Computer Research and Development , 2017 , 54 ( 10 ): 2130 - 2143 .

HINAREJOS F , LOPEZ J , MONTENEGRO J A , et al . Pervasive authentication and authorization infrastructures for mobile users [J ] . Computers ＆ Security , 2010 , 29 ( 4 ): 501 - 514 .

LEE D G , KANG S I , SEO D H , et al . Authentication for single/multi domain in ubiquitous computing using attribute certification [C ] // International Conference on Computational Science and ITS Applications . 2006 : 326 - 335 .

AYE N , KHIN H S , WIN T T , et al . Multi-domain public key infrastructure for information security with use of a multi-agent system [M ] . Intelligent Information and Database Systems . Berlin : Springer , 2013 : 365 - 374 .

BELLARE M , NAMPREMPRE C , NEVEN G . Security proofs for identity-based identification and signature schemes [C ] // Advances in Cryptology Eurocrypt 2004 . 2004 : 268 - 286 .

罗长远 , 霍士伟 , 邢洪智 . 普适环境中基于身份的跨域认证方案 [J ] . 通信学报 , 2011 , 32 ( 9 ): 111 - 115 .

LUO C Y , HUO S W , XING H Z . Identity-based cross-domain authentication scheme in pervasive computing environments [J ] . Journal on Communications , 2009 , 30 ( 4 ): 130 - 136 .

GENTRY C , . Certificate-based encryption and the certificate revocation problem [C ] // International Conference on Theory and Applications of Cryptographic Techniques . 2003 : 272 - 293 .

KANG B G , PARK J H , SANG G H . A certificate-based signature scheme [C ] // Cryptolograheres Track Research Conference . 2004 : 99 - 111 .

LIU J K , BAEK J , SUSILO W , et al . Certificate-based signature schemes without pairings or random oracles [C ] // International Conference on Information Security . 2008 : 285 - 297 .

朱辉 , 李晖 , 苏万力 , 等 . 基于身份的匿名无线认证方案 [J ] . 通信学报 , 2009 , 30 ( 4 ): 130 - 136 .

ZHU H , LI H , SHU W L , et al . ID-based wireless authentication scheme with anonymity [J ] . Journal on Communications , 2009 , 30 ( 4 ): 130 - 136 .

LI J , WANG Z , ZHANG Y . Provably secure certificate-based signature scheme without pairings [M ] . Elsevier Science Inc . 2013 : 313 - 320 .

LI J , HUANG X , MU Y , et al . Certificate-based signature:security model and efficient construction [J ] . Public Key Infrastructure , 2007 ,( 4582 ): 110 - 125 .

VERMA G K , SINGH B B . Short certificate-based proxy signature scheme from pairings [J ] . Transactions on Emerging Telecommunications Technologies , 2017 ( 1 ): 3214 .

ZHANG Y , LI J G , WANG Z , et al . A new efficient certificate-based signature scheme [J ] . Chinese Journal of Electronics , 2015 , 24 ( 4 ): 776 - 782 .

MAN H A , LIU J K , SUSILO W , et al . Certificate based (linkable) ring signature [C ] // International Conference on Information Security Practice and Experience . 2007 : 79 - 92 .

彭华熹 , 冯登国 . 匿名无线认证协议的匿名性缺陷和改进 [J ] . 通信学报 , 2006 , 27 ( 9 ): 78 - 85 .

PENG H X , FENGDG . Security flaws and improvement to a wireless authentication protocol with anonymity [J ] . Journal on Communications , 2006 , 27 ( 9 ): 78 - 85 .

Views

1524

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Lightweight cross domain authentication for satellite internet

Cross-domain authentication scheme based on consortium blockchain

PKI cross-domain authentication scheme based on advanced PBFT algorithm

Overview of privacy preserving in social network

Related Author

CHEN Cao

LI Fenghua

YU Mengge

GUO Chao

LI Zifu

GENG Kui

Jianlin NIU

Zhiyu REN

Related Institution

Institute of Information Engineering, Chinese Academy of Sciences

School of Cyber Security, University of Chinese Academy of Sciences

State Key Laboratory of Cyberspace Security Defense

Department of Cyberspace Security, Beijing Electronic Science and Technology Institute

Department of Electronics and Communication Engineering, Beijing Electronic Science and Technology Institute

⁰