面向移动IPv6层次化网络的快速接入认证方案

doi:10.3969/j.issn.1000-436x.2013.z1.035

通信学报 ›› 2013, Vol. 34 ›› Issue (Z1): 263-267.doi: 10.3969/j.issn.1000-436x.2013.z1.035

面向移动IPv6层次化网络的快速接入认证方案

宋姗姗,尚涛,刘建伟

北京航空航天大学电子信息工程学院，北京100191

出版日期:2013-08-25 发布日期:2017-06-23
基金资助:
国家重点基础研究发展规划项目计划（“973计划）基金资助项目;国家自然科学基金资助项目;北京市自然科学基金资助项目

Fast access authentication scheme for mobile IPv6 hierarchical network

Shan-shan SONG,Tao SHANG,Jian-wei LIU

School of Electronic and Information Engineering, Beihang University, Beijing 100191, China

Online:2013-08-25 Published:2017-06-23
Supported by:
The National Key Basic Research Program (NKBRP) (973 program);The National Natural Science Foundation of China;The Beijing Natural Science Foundation

摘要/Abstract

摘要：

提出了一个面向移动IPv6层次化网络的快速接入认证方案，从效率和安全性2个方面提高移动IPv6层次化网络接入认证的性能。首先，利用向量网络地址编码方法实现网络数据传输，提高家乡注册性能；其次，提出一种基于格的层次化签名方案，在接入认证过程中实现双向认证，提高认证过程的安全性。方案分析表明，所提出的接入认证方案具有强不可伪造性并可以抵御网络中的重放攻击，同时可以减少整个接入认证过程的延迟时间。

关键词: 移动IPv6, 层次化, 接入认证, 格签名

Abstract:

A fast access authentication scheme for mobile IPv6 hierarchical network was proposed, which improves the performance of access authentication of mobile IPv6 hierarchical network from two aspects, efficiency and security. Firstly, the scheme used the vector network address coding method to improve the home registration performance. Sec-ondly, a hierarchical lattice-based signature scheme was designed to implement the two-way authentication and improve the security of the authentication process. The analysis of the scheme shows that it is strongly unforgeable, and mean-while it can defend replay attacks and reduce the delay time of the entire authentication process.

Key words: mobile IPv6, hierarchical, access authentication, lattice signature

宋姗姗,尚涛,刘建伟. 面向移动IPv6层次化网络的快速接入认证方案[J]. 通信学报, 2013, 34(Z1): 263-267.

Shan-shan SONG,Tao SHANG,Jian-wei LIU. Fast access authentication scheme for mobile IPv6 hierarchical network[J]. Journal on Communications, 2013, 34(Z1): 263-267.

图/表 3

参考文献 11

[1]	TIAN Y , ZHANG Y , ZHANG H . Identity-based hierarchical access authentication in mobile IPv6 networks[A]. Istanbul[C]. 2006.1953-1958.
[2]	ZHANG J , ZHANG Y , ZHANG H . Trust-based fast authentication for mobile IPv6 networks[A]. IEEE Globecom[C]. New Orleans, LO, 2008.1-5.
[3]	TIAN Y , ZHANG Y , LIU Y . A fast authentication mechanism using identity based signature in mobile IPv6 network[J]. Chinese Journal of Computers, 2007,17 (9):1980-1988.
[4]	LIANG M . A Method for Vector Network Address Coding[P]. WO2007147328A1, 2007.
[5]	ZHAO A Q , LIANG M G . A new forwarding address for next genera-tion networks[J]. Journal of Zhejiang University Science C, 2012,13 (1):1-10.
[6]	SHOR P . Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer[J]. SIAM Journal on Computing, 1997,26 (5):1484-1509.
[7]	ALWEN J , PEIKERT C . Generating shorter bases for hard random lattices[J]. Theory of Computing Systems, 2011,48 (3):535-553.
[8]	AGRAWAL S , BONEH D , BOYEN X . Efficient lattice (H)IBE in the standard model[A]. Advances in Cryptology-Eurocrypt[C]. Riviera, French, 2010.553-572.
[9]	CASH D , HOFHEINZ D , KILTZ E , et al. Bonsai trees, or how to delegate a lattice basis[J]. Journal of Cryptology, 2012,25 (4):523-552.
[10]	LI F , MUHAYA F T B , KHAN M K , et al. Lattice-based signcryption. .
[11]	RUCKERT M . Strongly unforgeable signatures and Hierarchical identity based signatures from lattices without random oracles[A]. Post-Quantum Cryptography[C]. Darmstadt, Germany, 2010.182-200.

签名机制	公共参数长度/bit	私钥长度/bit	签名长度/bit
文献[11]	(nm(2dk+2λ+1)+n)lbq	(lk+1)²m²lbq	(lk+λ+1)mlbq+n
本文签名方案	(nm(d+4)+n)lbq	m ²lbq	(2m+1)lbq

[1]	曹进, 卜秋雨, 杨元元, 李晖, 刘樵, 马懋德. 基于位置密钥的增强型北斗用户设备接入认证协议[J]. 通信学报, 2022, 43(11): 80-89.
[2]	曾诗钦, 霍如, 黄韬, 刘江, 汪硕, 冯伟. 区块链技术研究综述：原理、进展与应用[J]. 通信学报, 2020, 41(1): 134-151.
[3]	柳斌，贺聿志，章勇. 使用集中式802.1x构建校园网认证系统[J]. 通信学报, 2014, 35(Z1): 17-90.
[4]	柳斌,贺聿志,章勇. 使用集中式802.1x构建校园网认证系统[J]. 通信学报, 2014, 35(Z1): 87-90.
[5]	宋姗姗，尚涛，刘建伟. 面向移动IPv6层次化网络的快速接入认证方案[J]. 通信学报, 2013, 34(Z1): 35-267.
[6]	许晓荣,黄爱苹,章坚武. 基于贝叶斯压缩感知的认知WSN数据融合策略[J]. 通信学报, 2011, 32(9A): 220-225.
[7]	张玉军,张红梅,马超,许智君,张瀚文. 基于环状检测/备份链的移动代理容错方法[J]. 通信学报, 2011, 32(9): 18-25.
[8]	米海波,王怀民,蔡华,尹刚,周琦,孙廷韬,周扬帆. 面向云计算平台的层次化性能问题诊断方法[J]. 通信学报, 2011, 32(7): 114-124.
[9]	赖成喆,李晖,张跃宇,曹进. 改进的代理移动IPv6快速切换方案[J]. 通信学报, 2011, 32(11A): 137-142.
[10]	马舒洁,罗森林,潘丽敏,谢尔曼. 基于镜头组权重的MTV摘要自动提取方法[J]. 通信学报, 2010, 31(8A): 48-51.
[11]	唐军,裴昌幸,苏博. 基于冗余路由信息和预缓存策略的移动IPv6快速切换方法[J]. 通信学报, 2010, 31(10): 244-252.
[12]	高天寒,郭楠,朱志良. 基于动态策略的分布式移动IPv6网络安全管理机制[J]. 通信学报, 2009, 30(1): 50-57.
[13]	陈魏鑫,韩国栋,刘洪波,蔡惠. 基于快速DAD的分层移动IPv6切换算法[J]. 通信学报, 2008, 29(1): 115-120.
[14]	肖文曙,张玉军,李忠诚. 移动IPv6网络的层次AAA方案研究[J]. 通信学报, 2006, 27(2): 50-55.
[15]	赵会宁. 安全增强的迂回路由机制[J]. 通信学报, 2006, 27(11A): 40-42.

面向移动IPv6层次化网络的快速接入认证方案

Fast access authentication scheme for mobile IPv6 hierarchical network

在线阅读

PDF下载

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 3

参考文献 11

相关文章 15

Metrics

推荐阅读 0