基于身份标识加密的身份认证方案

doi:10.11959/j.issn.2096-109x.2016.00047

Abstract

Abstract:

In large-scale communication nodes network,there are a large number of network nodes and so many types of equipment.So there are problems of certificate management difficulties and resource waste in the tradi-tional PKI cryptosystem.A mutual node authentication scheme based on identity-based encryption,which solved the problem of the digital certificate management in the PKI system by the identity-based encryption and the key escrow problem in identity based cryptograph by splitting the key as well,was designed.At the same time,the introduction of random factor,timestamp and hash algorithm in the authentication protocol prevented various network attacks.Finally,the security and efficiency of the encryption algorithm and the security of the authentication protocol were analyzed,which proved the security and reliability of the authentication scheme.

Key words: node identity authentication, identity based cryptograph, key escrow, encryption

CLC Number:

TP309.7

Ren-ji HUANG,Xiao-ping WU,Hong-cheng LI. Identity authentication scheme based on identity-based encryption[J]. Chinese Journal of Network and Information Security, 2016, 2(6): 32-37.

Figures/Tables 5

References 13

[1]	黎妹红，韩磊 . 身份认证技术及应用[M]. 北京: 北京邮电大学出版社, 2012.
	LI M H , HAN L . Identity authentication technology and applica-tion[M]. Beijing: Beijing University of Posts and Telecommunica-tions Press, 2012.
[2]	ESCHENAUER L , GLIGOR V . A key-management scheme for distributed sensor networks[C]// The 9th ACM Conference on Computer and Communications Security.c 2002:41-47.
[3]	DU W , DENG J , HAN Y S , et al. A pairwise key pre-distribution scheme for wireless sensor networks[J]. ACM Transaction on In-formation and System Security, 2005,8 (2):228-258.
[4]	LIU D , NING P . Establishing pairwise keys in distributed sensor networks[C]// The 10th ACM Conference on Computer and Com-munications Security.c 2003:52-61.
[5]	杨浩淼，邱乐德 . 基于身份的公钥密码体制的研究[M]. 成都: 电子科技大学出版社, 2012.
	YANG H M , QIU L D . Research on identity-based public key cryptosystem[M]. Chengdu: University of Electronic Science and Technology Press, 2012.
[6]	邓伦治，王祥斌，瞿云云 . 高效的基于身份的签密方案[J]. 计算机工程与科学, 2014,36(3):441-445.
	DENG L Z , WANG X B , QU Y Y . High-efficient signcryption scheme based on identity[J]. Computer Engineering ＆ Science, 2014,36(3):441-445.
[7]	马陵勇，卓泽朋，廉玉忠 . 新的无证书签密方案[J]. 吉林师范大学学报, 2014,3:93-95.
	MA L Y , ZHUO Z P , LIAN Y Z , . New certificateless signcryption scheme[J]. Journal of Jilin Normal University, 2014,3:93-95.
[8]	胡亮，赵阔，袁巍，等．基于身份的密码学[M]. 北京: 高等教育出版社, 2011.
	HU L , ZHAO K , YUAN W , et al. The cryptography based on iden-tity[M]. Beijing: Higher Education Press, 2011.
[9]	BONEC D , FRANKLIN M . Identity-based encryption from the weil pairing[J]. Siam Journal on Computing, 2003,32 (3):213-229.
[10]	李发根，吴威峰 . 基于配对的密码学[M]. 北京: 科学出版社, 2014.
	LI F G , WU W F . Based on the matching of cryptography[M]. Beijing: Science Press, 2014.
[11]	张丽，郝身刚，岳贤锋 . 基于双线性映射的匿名跨域认证方案[J]. 河南师范大学学报, 2013,41(1):155-158.
	ZHANG L , HAO S G , QIU X F . An anonymous autentication for multi-domain based on the bilinear map[J]. Journal of Henan Nor-mal University, 2013,41(1):155-158.
[12]	刘团奇，张浩军，赵志鹏 . 一种云环境下基于身份的统一身份认证方案研究[J]. 中原工学院学报, 2015,26(4):55-58.
	LIU T Q , ZHANG H J , ZHAO Z P . A unified identity authentica-tion scheme research in cloud with ID-based[J]. Journal of Zhongyuan Institute of Technology, 2015,26(4):55-58.
[13]	叶清 . 网络安全原理[M]. 武汉: 武汉大学出版社, 2014.
	YE Q . Network security principle[M]. Wuhan: Wuhan University Press, 2014.

Metrics

Recommended 0

No Suggested Reading articles found!

加密方案	安全性
BasicIdent和FullIdent体制	随机预言机模型选择密文安全要求完全信任KGC
	标准模型
Waters体制	选择明文安全
	要求完全信任KGC
本文方案	标准模型系统的安全不完全依赖一个KGC

加密方案	系统建立及密钥分配阶段	加密阶段	解密阶段
BasicIdent体制和FullIdent体制	10 ms量级	20 ms	20 ms
Waters体制	100 ms量级	30 ms	30 ms
本文方案	100 ms量级	30 ms	30 ms

认证方案	特点
网络上常用方案	需要数字证书绑定身份与公钥，需要建立CA认证体系
普通基于身份的密码方案	不需数字证书与CA，存在密钥托管问题，认证形式单一
本文方案	不需数字证书与 CA，需建立多个KGC，多因素进行认证

[1]	Chenghao YUAN, Yong LI, Shuang REN. Dynamic multi-keyword searchable encryption scheme [J]. Chinese Journal of Network and Information Security, 2023, 9(2): 143-153.
[2]	Jin CAO, Xiaoping SHI, Ruhui MA, Hui LI. Fusion of satellite-ground and inter-satellite AKA protocols for double-layer satellite networks [J]. Chinese Journal of Network and Information Security, 2023, 9(1): 18-31.
[3]	Qiang LIU, Pengfei LI, Zhangjie FU. Secure controlling method for scalable botnets [J]. Chinese Journal of Network and Information Security, 2023, 9(1): 42-55.
[4]	Yuguang YANG, Guodong CAO. New image encryption algorithm based on double chaotic system and compressive sensing [J]. Chinese Journal of Network and Information Security, 2022, 8(5): 88-97.
[5]	Yitian GAO, Liquan CHEN, Tianyang TU, Yuan GAO, Qianye CHEN. Post-quantum encryption technology based on BRLWE for internet of things [J]. Chinese Journal of Network and Information Security, 2022, 8(5): 140-149.
[6]	Lin JIN, Youliang TIAN. Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain [J]. Chinese Journal of Network and Information Security, 2022, 8(4): 66-76.
[7]	Shang LIU, Yinzhang GUO. Multi-authority based CP-ABE proxy re-encryption scheme for cloud computing [J]. Chinese Journal of Network and Information Security, 2022, 8(3): 176-188.
[8]	Yihua ZHOU, Xinyu HU, Meiqi LI, Yuguang YANG. Searchable encryption scheme based on attribute policy hiding in a cloud environment [J]. Chinese Journal of Network and Information Security, 2022, 8(2): 112-121.
[9]	Fuyuan SONG, Zheng QIN, Jixin ZHANG, Yu LIU. Efficient and secure multi-user outsourced image retrieval scheme with access control [J]. Chinese Journal of Network and Information Security, 2021, 7(5): 29-39.
[10]	Yu ZHANG, Hailiang LI. RSA-based image recognizable adversarial attack method [J]. Chinese Journal of Network and Information Security, 2021, 7(5): 40-48.
[11]	Wei GU, Jian SHEN, Yongjun REN. Secure key-sharing algorithm based on smart grid [J]. Chinese Journal of Network and Information Security, 2021, 7(4): 141-146.
[12]	Liutao ZHAO,Lin ZHONG,Jidong LIU,Caiqun WANG,Dan WU. Triple receiver public key encryption cryptosystem [J]. Chinese Journal of Network and Information Security, 2020, 6(6): 128-136.
[13]	Zhe LI,Yiliang HAN,Yu LI. Improved RLCE public key encryption scheme based on Polar codes [J]. Chinese Journal of Network and Information Security, 2020, 6(5): 110-118.
[14]	Shaozhuo LI,Na WANG,Xuehui DU. Privacy protection mechanism of on-demand disclosure on blockchain [J]. Chinese Journal of Network and Information Security, 2020, 6(3): 19-29.
[15]	Guoqiang GAO,Zichen LI. Research and design of authenticated encryption algorithm based on AES round function [J]. Chinese Journal of Network and Information Security, 2020, 6(2): 106-115.

Identity authentication scheme based on identity-based encryption

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 5

References 13

Related Articles 15

Metrics

Recommended 0