可证明安全的智能移动终端私钥保护方案

doi:10.3969/j.issn.1000-436x.2012.12.014

Abstract

Abstract:

A provable security scheme for private key protection of smart mobile terminal (SMT) was presented.In the scheme a improved security mechanism is incorporated,which includes password protection,key division and partial key retrieval from server of strong computing capability in order to protect private key security.Compared with previous proposals,the scheme has the following advantages.It reduces computation amount and storage of SMT,and simplifies parameter setting for interaction processes.It takes time synchronization between SMT and server into account.The latter characteristic not only provides better protection of scheme from replay attacks,but also offers a highly efficient mechanism of user private key disabling,and avoiding complex operation of user and extra storage of other device.The investigation has indicated that improved private key protection to SMT can be well achieved with this scheme.The scheme has also been proved to provide satisfactory security in the random oracle model.

Key words: private key protection, provable security, random oracle model

Jun MA,Jian-feng MA,Yuan-bo GUO. Provably secure private key protection scheme for smart mobile terminal[J]. Journal on Communications, 2012, 33(12): 108-115.

Figures/Tables 1

References 14

[1]	STUDER A , PERRIG A . Mobile user location-specific encryption (MULE):using your office as your password[A]. Proceedings of the 3rd ACM Conference on Wireless Network Security (WiSec '10)[C]. 2010.
[2]	VILA E , BOROVSKA P . Data protection utilizing trusted platform module[J]. Opportunities in Opportunistic Computing, 2010,43(1): 42-50.
[3]	Trusted Computing Group. TPM main part 3 commands,spec fication version 1.2,level 2 revision 103[EB/OL]. , 2007.
[4]	JOHN P , LEE R B . Protecting cryptographic keys and computations via virtual secure coprocessing[A]. ACM SIGARCH Computer Architecture News[C]. 2005.
[5]	LOCASTO M E , SIDIROGLOU S , KEROMYTIS A D . Speculative virtual verification:policy-constrained speculative execution[A]. Proceedings of the New Security Paradigms Workshop (NSPW)[C]. 2005. 170-175.
[6]	BELLOVIN S , MERRITT M . Augmented encrypted key exchange:a password-based protocol secure against dictionary attacks and pass-word file compromise[A]. Proceedings of the 1st ACM Conference on Computer and Communication Security[C]. New York, 1993. 244-250.
[7]	FENG D G , XU J . A new client-to-client password-authenticated key agreement protocol[A]. Proceedings of IWCC 2009[C]. Berlin,Springer-Verlag, 2009. 63-76.
[8]	PERLMAN R , KAUFMAN C . Secure password-based protocol for downloading a private key[A]. Proc NDSS’99[C]. 1999.
[9]	GOLDREICH O , GOLDWASSER S , MICALI S . How to construct random functions[J]. ACM, 1986,33(4): 210-217.
[10]	BELLARE M . New proofs for NMAC and HMAC:security without collision-resistance[A]. CRYPTO 2006[C]. Springer Verlag, 2006. 602-619.
[11]	MACKENZIE P , REITER M . Networked cryptographic devices resilient to capture[A]. Proc IEEE Symposium on Security and Privacy[C]. Springer Verlay, 2001.
[12]	XU S , SANDHU R A . Scalable and security cryptographic service[A]. Data and Applications Security XXI[C]. Berlin,Springer Verlag, 2007. 144-160.
[13]	BELLARE M , ROGAWAY P . Random oracles are practical-a paradigm for designing efficient protocols[A]. Proceedings of the First ACM Conference on Computer and Communications Security[C]. 1993. 62-73.
[14]	BELLARE M , ROGAWAY P . The exact security of digital signatureshow to sign with rsa and rabin[A]. Proceedings of EUROCRYPT’96[C]. 1996. 399-416.

Metrics

Recommended 0

No Suggested Reading articles found!

[1]	Huanhuan LIAN, Huiying HOU, Yunlei ZHAO. Post-quantum verifier-based three-party password authenticated key exchange protocol [J]. Journal on Communications, 2022, 43(4): 95-106.
[2]	Zhen LIU,Yiliang HAN,Xiaoyuan YANG,Shuguang LIU. Provable security signcryption scheme based on RLWE without trapdoor [J]. Journal on Communications, 2020, 41(6): 14-25.
[3]	Changgen PENG, Xiaoyu ZHANG, Hongfa DING, Shanhui YANG. Efficient signcryption scheme based on Cocks’ identity cryptosystem [J]. Journal on Communications, 2020, 41(12): 128-138.
[4]	Youliang TIAN,Qiuxian LI,Duo ZHANG,Linjie WANG. Provably secure rational delegation computation protocol [J]. Journal on Communications, 2019, 40(7): 135-143.
[5]	Jinxia YU,Huanhuan LIAN,Yongli TANG,Mengyao SHI,Zongqu ZHAO. Password-based three-party authenticated key exchange protocol from lattices [J]. Journal on Communications, 2018, 39(11): 87-97.
[6]	Xiao-wei LI,Deng-qi YANG,Ben-hui CHEN,Yu-qing ZHANG. Two-factor authenticated key agreement protocol based on biometric feature and password [J]. Journal on Communications, 2017, 38(7): 89-95.
[7]	Ruo MO,Jian-feng MA,Xi-meng LIU,Qi LI. Multi-authority ABS supporting dendritic access structure [J]. Journal on Communications, 2017, 38(7): 96-104.
[8]	Cheng SONG,Ming-yue ZHANG,Wei-ping PENG,Zong-pu JIA,Zhi-zhong LIU,Xi-xi YAN. Research on batch anonymous authentication scheme for VANET based on bilinear pairing [J]. Journal on Communications, 2017, 38(6): 49-57.
[9]	Cheng SONG,Ming-yue ZHANG,Wei-ping PENG,Zong-pu JIA,Zhi-zhong LIU,Xi-xi YAN. Research on pairing-free certificateless batch anonymous authentication scheme for VANET [J]. Journal on Communications, 2017, 38(11): 35-43.
[10]	Ran DUAN,Chun-xiang GU,Yue-fei ZHU,Yong-hui ZHENG,Li CHEN. Efficient identity-based fully homomorphic encryption over NTRU [J]. Journal on Communications, 2017, 38(1): 66-75.
[11]	Hao-xing LI,Feng-hua LI,Cheng-gen SONG,Ya-long YAN. Provable data possession scheme with authentication [J]. Journal on Communications, 2016, 37(10): 117-127.
[12]	Zhen-guo ZHAO. Security analysis and improvement of a certificateless signcryption scheme [J]. Journal on Communications, 2015, 36(3): 75-80.
[13]	. Analysis and improvement of an identity-based signcryption [J]. Journal on Communications, 2015, 36(11): 174-179.
[14]	Hong-zhen DU,Qiao-yan WEN. Improved certificateless sequential multi-signature scheme [J]. Journal on Communications, 2015, 36(10): 56-61.
[15]	. Provably secure and efficient escrowable public key encryption schemes [J]. Journal on Communications, 2014, 35(7): 4-37.

Provably secure private key protection scheme for smart mobile terminal

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 1

References 14

Related Articles 15

Metrics

Recommended 0