基于证书的匿名跨域认证方案

丁永善; 李立新; 李作辉

doi:10.11959/j.issn.2096-109x.2018040

您当前的位置：

首页 >

文章列表页 >

基于证书的匿名跨域认证方案

学术论文 | 更新时间：2024-06-03

- 基于证书的匿名跨域认证方案
- Certificate-based cross-domain authentication scheme with anonymity
- 网络与信息安全学报 2018年4卷第5期页码：32-38
- 作者机构：
- 作者简介：
  
  [ "丁永善（1992-），男，河南周口人，信息工程大学硕士生，主要研究方向为信息安全。" ]
  [ "李立新（1967-），男，重庆人，博士，信息工程大学研究员，主要研究方向为数据库、信息安全。" ]
  [ "李作辉（1981-），男，湖南衡阳人，博士，信息工程大学副研究员，主要研究方向为信息安全。" ]
- 基金信息：
  
  国家重点研发计划基金资助项目;The National Key R＆D Plan Program of China(2017YFB0802100);国家重点研发计划基金资助项目;The National Key R＆D Program of China(2016YFB0501900)
- DOI：10.11959/j.issn.2096-109x.2018040
  中图分类号： TP309
- 网络首发：2018-05，
  
  纸质出版：2018-05-15
- 稿件说明：
移动端阅览
丁永善, 李立新, 李作辉. 基于证书的匿名跨域认证方案[J]. 网络与信息安全学报, 2018,4(5):32-38.

Yongshan DING, Lixin LI, Zuohui LI. Certificate-based cross-domain authentication scheme with anonymity[J]. Chinese Journal of Network and Information Security, 2018, 4(5): 32-38.
丁永善, 李立新, 李作辉. 基于证书的匿名跨域认证方案[J]. 网络与信息安全学报, 2018,4(5):32-38. DOI： 10.11959/j.issn.2096-109x.2018040.

Yongshan DING, Lixin LI, Zuohui LI. Certificate-based cross-domain authentication scheme with anonymity[J]. Chinese Journal of Network and Information Security, 2018, 4(5): 32-38. DOI： 10.11959/j.issn.2096-109x.2018040.

摘要

针对物联网中移动设备的跨域认证问题，提出一种基于证书的匿名跨域认证方案。首先，结合PKI和IBS的相关特性，提出一种基于证书的签名（CBS

certificate based signature）方案，并对提出的CBS方案的安全性进行了证明。方案中签名的验证结果为常量，保证跨域过程中认证实体的匿名性。该签名方案不仅避免了复杂的对运算，而且避免了传统PKI中复杂的证书管理和IBS中的密钥托管和分发问题。然后，基于CBS方案设计了一种适用于移动设备的跨域认证方案，该算法能在安全、高效的同时保证认证的匿名性。最后，同其他跨域认证方案进行了对比，对比结果表明，所提方案具有更强的安全性和更小的计算和通信开销，为计算能力和功率受限的移动设备进行跨域认证提供了一种较为实用的解决方案。

Abstract

Considered the cross-domain authentication of mobile devices in the Internet of things

a certificate based anonymous cross-domain authentication scheme was proposed.First

combined with the characteristics of PKI and IBS

a certificate based signature (CBS) algorithm was proposed，and the security of the proposed CBS scheme was proved.The verification result of the signature in the algorithm was constant

which ensured the anonymity of the authentication entities in the cross-domain process.The algorithm does not contain pairing

and avoids complex certificate management in traditional PKI and the key escrow and distribution of IBS.Then a cross-domain authentication scheme for mobile devices was constructed by combining the proposed signature algorithm.The scheme ensures the anonymity of authentication at the same time.Finally

compared with other schemes

the scheme proposed is more secure and has less computation cost and communication cost.Moreover

the scheme is simple and efficient

and could be applied to the cross-domain authentication of mobile devices.

关键词

Keywords

references

ROMAN R , ZHOU J , LOPEZ J . On the features and challenges of security and privacy in distributed internet of things [J ] . Computer Networks , 2013 , 57 ( 10 ): 2266 - 2279 .

武传坤 . 物联网安全关键技术与挑战 [J ] . 密码学报 , 2015 , 2 ( 1 ): 40 - 53 .

WU C K . An overview on the security techniques and challenges of the Internet of things [J ] . Journal of Cryptologic Research , 2015 , 2 ( 1 ): 40 - 53 .

张玉清 , 周威 , 彭安妮 . 物联网安全综述 [J ] . 计算机研究与发展 , 2017 , 54 ( 10 ): 2130 - 2143 .

ZHANG Y Q , ZHOU W , PENG A N . Survey of Internet of things security [J ] . Journal of Computer Research and Development , 2017 , 54 ( 10 ): 2130 - 2143 .

HINAREJOS F , LOPEZ J , MONTENEGRO J A , et al . Pervasive authentication and authorization infrastructures for mobile users [J ] . Computers ＆ Security , 2010 , 29 ( 4 ): 501 - 514 .

LEE D G , KANG S I , SEO D H , et al . Authentication for single/multi domain in ubiquitous computing using attribute certification [C ] // International Conference on Computational Science and ITS Applications . 2006 : 326 - 335 .

AYE N , KHIN H S , WIN T T , et al . Multi-domain public key infrastructure for information security with use of a multi-agent system [M ] . Intelligent Information and Database Systems . Berlin : Springer , 2013 : 365 - 374 .

BELLARE M , NAMPREMPRE C , NEVEN G . Security proofs for identity-based identification and signature schemes [C ] // Advances in Cryptology Eurocrypt 2004 . 2004 : 268 - 286 .

罗长远 , 霍士伟 , 邢洪智 . 普适环境中基于身份的跨域认证方案 [J ] . 通信学报 , 2011 , 32 ( 9 ): 111 - 115 .

LUO C Y , HUO S W , XING H Z . Identity-based cross-domain authentication scheme in pervasive computing environments [J ] . Journal on Communications , 2009 , 30 ( 4 ): 130 - 136 .

GENTRY C , . Certificate-based encryption and the certificate revocation problem [C ] // International Conference on Theory and Applications of Cryptographic Techniques . 2003 : 272 - 293 .

KANG B G , PARK J H , SANG G H . A certificate-based signature scheme [C ] // Cryptolograheres Track Research Conference . 2004 : 99 - 111 .

LIU J K , BAEK J , SUSILO W , et al . Certificate-based signature schemes without pairings or random oracles [C ] // International Conference on Information Security . 2008 : 285 - 297 .

朱辉 , 李晖 , 苏万力 , 等 . 基于身份的匿名无线认证方案 [J ] . 通信学报 , 2009 , 30 ( 4 ): 130 - 136 .

ZHU H , LI H , SHU W L , et al . ID-based wireless authentication scheme with anonymity [J ] . Journal on Communications , 2009 , 30 ( 4 ): 130 - 136 .

LI J , WANG Z , ZHANG Y . Provably secure certificate-based signature scheme without pairings [M ] . Elsevier Science Inc . 2013 : 313 - 320 .

LI J , HUANG X , MU Y , et al . Certificate-based signature:security model and efficient construction [J ] . Public Key Infrastructure , 2007 ,( 4582 ): 110 - 125 .

VERMA G K , SINGH B B . Short certificate-based proxy signature scheme from pairings [J ] . Transactions on Emerging Telecommunications Technologies , 2017 ( 1 ): 3214 .

ZHANG Y , LI J G , WANG Z , et al . A new efficient certificate-based signature scheme [J ] . Chinese Journal of Electronics , 2015 , 24 ( 4 ): 776 - 782 .

MAN H A , LIU J K , SUSILO W , et al . Certificate based (linkable) ring signature [C ] // International Conference on Information Security Practice and Experience . 2007 : 79 - 92 .

彭华熹 , 冯登国 . 匿名无线认证协议的匿名性缺陷和改进 [J ] . 通信学报 , 2006 , 27 ( 9 ): 78 - 85 .

PENG H X , FENGDG . Security flaws and improvement to a wireless authentication protocol with anonymity [J ] . Journal on Communications , 2006 , 27 ( 9 ): 78 - 85 .

浏览量

1524

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

面向卫星互联网的设备跨域轻量级认证

基于联盟链的跨域认证方案

基于改进PBFT算法的PKI跨域认证方案

社交网络中的隐私保护研究综述