基于TPM的云计算平台双向认证方案

doi:10.3969/j.issn.1000-436x.2012.z2.004

Abstract

Abstract:

A mutual authentication scheme based on the TPM cloud computing platform was proposed to solve the problem of mutual authentication between user and cloud computing server.Trusted computing technology and traditional smart card password method were used in cloud computing service platform.The scheme completed the authentication of both sides in cloud computing,generated the session key according consulting,at the same time,verified the credibility of cloud service platform.Experiment analysis shows that our scheme can resist various kinds of possible attacks,so it is therefore more secure than other schemes.And the computing time meet the requirements of cloud computing environment.

Key words: cloud computing, identity authentication, TPM, mutual authentication

Zhen-peng LIU,Feng-long WU,Kai-yu SHANG,Wen-lei CHAI,Xiao WANG. Mutual authentication scheme based on the TPM cloud computing platform[J]. Journal on Communications, 2012, 33(Z2): 20-24.

Figures/Tables 7

References 11

[1]	陈康, 郑纬民 . 云计算:系统实例与研究现状[J]. 软件学报, 2009,20(5): 1337-1348. CHEN K , ZHENG W M . Cloud computing:system instances and current research[J]. Journal of Software, 2009,20(5): 1337-1348.
[2]	罗军舟, 金嘉晖, 宋爱波 ,等. 云计算:体系架构与关键技术[J]. 通信学报, 2011,32(7): 3-21. LUO J Z , JIN J H , SONG A B ,et al. Cloud computing:architecture and key technologies[J]. Journal on Communications, 2011,32(7): 3-21.
[3]	冯登国, 张敏, 张妍 ,等. 云计算安全研究[J]. 软件学报, 2011,22(1): 71-83. FENG D G , ZHANG M , ZHANG Y ,et al. Study on cloud computing security[J]. Journal of Software, 2011,22(1): 71-83.
[4]	冯登国, 秦宇, 汪丹 ,等. 可信计算技术研究[J]. 计算机研究与发展, 2011,48(8): 1332-1349. FENG D G , QIN Y , WANG D ,et al. Research on trusted computing technology[J]. Journal of Computer Research and Development, 2011,48(8): 1332-1349.
[5]	Towards trusted cloud computing[EB/OL]. , 2009.
[6]	徐贤, 龙宇, 毛贤平 . 基于TPM的强身份认证协议研究[J]. 计算机工程, 2012,38(4): 23-27. XU X , LONG Y , MAO X P . Research on TPM based strong ID authentication protocol[J]. Computer Engineering, 2012,38(4): 23-27.
[7]	杨力, 马建峰 . 可信的智能卡口令双向认证方案[J]. 电子科技大学学报, 2011,40(1): 128-133. YANG L , MA J F . Trusted mutual authentication scheme with smart cards and passwords[J]. Journal of University of Electronic Science and Technology of China, 2011,40(1): 128-133.
[8]	CHEN T H , HSIANG H C , SHIH W K . Security enhancement on an improvement on two remote user authentication schemes using smart cards[J]. Future Generation Computer Systems, 2011,27(4): 377-380.
[9]	JUANG W S . Efficient password authenticated key agreement using smart card[J]. Computer and Security, 2004,23(2): 167-173.
[10]	FAN C I , LIN Y H , HSU R H . Remote password authentication scheme with smart cards and biometrics[A]. Proceedings of the IEEE Global Telecommunications Conference (GLOBECOM ′ 06)[C]. San Francisco,CA,USA, 2006. 1-5.
[11]	SANTHOSH B S , GOKULRAJ K . An enhanced dynamic mutual authentication scheme for smart card based networks[J]. Computer Network and Information Security, 2012,4(4): 30-38.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	含义
S	云计算服务器
U	用户
ID	用户身份
PW	用户口令
h(·)	安全单向哈希函数
PK	TPM产生的公私密钥对中的公钥
SK	TPM产生的公私密钥对中的私钥
‖	串联操作
⊕	按位异或操作
T	系统时间戳
Sig{}_SK	私钥签名运算
Log{}	安全度量日志提取
K_US	最终会话密钥

符号	含义
T_h	执行一次散列运算的时间
T_xor	执行一次异或运算的时间
T_exp	执行一次指数运算的时间
T_sig	执行一次签名加密运算的时间
T_pk	执行一次公钥解密运算时间
T_PCR	计算平台PCR值的时间
T_log	平台安全度量日志加载的时间

操作方式	1	2	3	4	5	6	7	8	平均值
异或操作	1 233	1 189	955	890	8 561	7 516	9 455	8 466	4 783.125
指数操作	455	852	873	4 582	4 686	14 859	45 646	13 774	10 715.875
散列操作	824 553	1 454 260	127 645	57 842	65 542	65 466	—	—	432 551.333
加密操作	1 256 731	5 614 958	874 214	3 558 642	—	—	—	—	2 826 136.25
解密操作	4 245 666	9 427 670	3 595 233	158 579	—	—	—	—	4 356 787

操作	JUANG方案^[9]	FAN方案^[10]	SANTHOSH方案^[11]	YANG方案^[7]	本文方案
异或操作	1	3	12	12	9
指数操作	4	1	—	15	7
散列操作	5	4	6	4	4
加密操作	3	3	2	1	1
解密操作	3	4	2	1	1

操作	总处理时间/ns
JUANG方案^[9]	23 759 143.04
FAN方案^[10]	27 660 827.332
SANTHOSH方案^[11]	17 018 551.998
YANG方案^[7]	9 131 264.207
本文方案	9 031 187.832

Mutual authentication scheme based on the TPM cloud computing platform

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 7

References 11

Related Articles 15

Metrics

Recommended 0

[1]	Ling MA, Qiliang FAN, Ting XU, Guanchen GUO, Shenglin ZHANG, Yongqian SUN, Yuzhi ZHANG. Scheduling framework based on reinforcement learning in online-offline colocated cloud environment [J]. Journal on Communications, 2023, 44(6): 90-102.
[2]	Shengbao WANG, Xin ZHOU, Kang WEN, Bosen WENG. Tripartite authenticated key exchange protocol for smart grid [J]. Journal on Communications, 2023, 44(2): 210-218.
[3]	Zhenyu WANG, Yang GUO, Shaoqing LI, Shen HOU, Ding DENG. Design of efficient anonymous identity authentication protocol for lightweight IoT devices [J]. Journal on Communications, 2022, 43(7): 49-61.
[4]	Huaqun WANG, Zhe LIU, Debiao HE, Jiguo LI. Identity-based provable data possession scheme for multi-source IoT terminal data in public cloud [J]. Journal on Communications, 2021, 42(7): 52-60.
[5]	Jianhong ZHANG, Menglong WU, Jing WANG, Pei LIU, Zhengtao JIANG, Changgen PENG. Secure and verifiable multi-keyword searchable encryption scheme in cloud [J]. Journal on Communications, 2021, 42(4): 139-149.
[6]	Ruiqi LI, Chunfu JIA, Yafei WANG. Multi-key homomorphic proxy re-encryption scheme based on NTRU and its application [J]. Journal on Communications, 2021, 42(3): 11-22.
[7]	Houzhen WANG, Xinwei CAI, Yan GUO, Huanguo ZHANG. 5-pass zero-knowledge identity authentication scheme based on matrix completion problem [J]. Journal on Communications, 2021, 42(11): 79-86.
[8]	Jiawei ZHANG, Jianfeng MA, Zhuo MA, Teng LI. Time-based and privacy protection revocable and traceable data sharing scheme in cloud computing [J]. Journal on Communications, 2021, 42(10): 81-94.
[9]	Wenjuan WANG, Xuehui DU, Dibin SHAN. Construction method of attack scenario in cloud environment based on dynamic probabilistic attack graph [J]. Journal on Communications, 2021, 42(1): 1-17.
[10]	Youliang TIAN,Qin LUO. Verifiable multi-keyword search scheme based on improved Merkle-Tree authentication method [J]. Journal on Communications, 2020, 41(9): 118-129.
[11]	Na WANG,Kun ZHENG,Junsong FU,Jian LI. Method of ciphertext retrieval in mobile edge computing based on block segmentation [J]. Journal on Communications, 2020, 41(7): 95-102.
[12]	Lindong ZHAO,Wenqin ZHUANG,Jianxin CHEN,Liang ZHOU. Hierarchical task offloading in heterogeneous cellular network:modeling and optimization [J]. Journal on Communications, 2020, 41(4): 34-44.
[13]	Bing LIANG,Wen JI. Multiuser computation offloading for edge-cloud collaboration using submodular optimization [J]. Journal on Communications, 2020, 41(10): 25-36.
[14]	SU Mingfeng,WANG Guojun,LI Renfa. Multidimensional QoS cloud computing resource scheduling method based on stakeholder perspective [J]. Journal on Communications, 2019, 40(6): 102-115.
[15]	CHEN Xingshu,HUA Qiang,WANG Yitong,GE Long,ZHU Yi. Research on low-rate DDoS attack of SDN network in cloud environment [J]. Journal on Communications, 2019, 40(6): 210-222.