基于混沌映射的用户匿名三方口令认证密钥协商协议

基于混沌映射的用户匿名三方口令认证密钥协商协议
王彩芬;陈丽;刘超;乔慧;王欢
【期刊名称】《计算机工程与科学》
【年(卷),期】2018(040)003
【摘要】In the three-party password authenticated key agreement based on chaotic map,by using week passwords,users can share the session key in order to avoid security threats in the authentication process of a public key infrastructure or storing long-term key.By analyzing the chaotic map-based password authenticated key agreement protocols proposed by Lee,we find that the agreement cannot change the password.Besides,it can only be applied to the two-way communication between the user and the server.In order to improve this scheme,we propose two user-anonymous three-party password authentication key agreement protocols based on Chebyshev chaotic map:one is based on synchronized clocks,while the other is based on nonces.The protocol based on synchronized clocks has less traffic,while the protocol based on nonces is easier to implement.The advantage of the two protocols is that users selects only one simple password for mutual authentication and key negotiation.The server does not need to protect the user password table,which can avoid the password-related attacks.In addition,in the process of mutual authentication,the user uses a temporary identity and hash function to achieve the user anonymity,while enhancing the security of the protocol
and reducing the number of messages in the communication process as well.As a result,the efficiency of the agreement is improved,with perfect forward security.And its security is proven by BAN logic.%在基于混沌的三方口令认证密钥协商协议中,用户通过低熵的口令实现相互认证和共享会话密钥,以避免在身份认证过程中公钥基础设施或存储用户长期密钥的安全威胁.通过分析Lee 提出的基于混沌映射的口令认证密钥协商协议,发现其协议不能进行口令变更,而且仅适用于用户和服务器之间的两方通信.为了改进此方案,提出两个基于切比雪夫混沌映射的用户匿名三方口令认证密钥协商协议,包括基于时钟同步的密钥协商方案和基于随机数的密钥协商方案.其中基于时钟同步的用户匿名三方口令认证密钥协商协议通信量少,基于随机数的用户匿名三方口令认证密钥协商协议更容易实现.两个方案的优点是用户仅选择一个简单的口令进行相互认证和密钥协商,服务器不需要再保护用户口令表,避免了口令相关的攻击,而且在相互认证过程中用户使用临时身份和哈希函数,实现用户匿名性,在增强协议安全性的同时,减少了通信过程中消息的数量,提高了协议的执行效率,具有完美前向安全,并用BAN逻辑证明了其安全性.【总页数】11页(P445-455)
【作者】王彩芬;陈丽;刘超;乔慧;王欢
【作者单位】西北师范大学计算机科学与工程学院,甘肃兰州730070;西北师范大学计算机科学与工程学院,甘肃兰州730070;西北师范大学计算机科学与工程学院,甘肃兰州730070;西北师范大学计算机科学与工程学院,甘肃兰州730070;西北师范大学计算机科学与工程学院,甘肃兰州730070
【正文语种】中文
【中图分类】TP393.08
【相关文献】
1.基于格的用户匿名三方口令认证密钥协商协议 [J], 王彩芬;陈丽
2.新的基于椭圆曲线的三方口令认证密钥协商协议 [J], 刘柱文;李丽琳
3.有效的基于混沌映射的三方认证密钥协商协议 [J], 李雄;吴凡;廖俊国;刘玉珍;
4.基于扩展混沌映射的三方认证密钥协商协议 [J], 闫丽丽;昌燕;张仕斌
5.基于理想格的用户匿名口令认证密钥协商协议 [J], 王彩芬;陈丽;张玉磊
因版权原因，仅展示原文概要，查看原文内容请购买。