改进的OpenID Connect协议及其安全性分析

发布时间：2018-06-02 15:23

本文选题：非对称加密 + 数字签名　；参考：《计算机应用》2017年05期

【摘要】：Open ID Connect协议是最新的单点登录协议之一,已经广泛应用于用户身份认证领域,其安全性受到了人们的重点关注。为增强Open ID Connect协议的安全性,首先引入数字签名及非对称加密技术,对其进行改进,重点关注改进后协议的秘密性和认证性;其次基于符号模型,应用应用PI演算对改进的Open ID Connect协议进行形式化建模;然后为验证改进后协议的认证性和秘密性,分别使用非单射性和query对认证性和秘密性进行建模;最后把改进的Open ID Connect协议的应用PI演算模型转换为安全协议分析工具ProVerif的输入,应用ProVerif对其进行形式化分析。实验结果表明,改进后的Open ID Connect协议具有认证性和秘密性。
[Abstract]:Open ID Connect protocol is one of the newest single sign-on protocols and has been widely used in the field of user identity authentication. In order to enhance the security of Open ID Connect protocol, digital signature and asymmetric encryption techniques are introduced to improve the security of the improved protocol, focusing on the secrecy and authentication of the improved protocol. Pi calculus is used to formalize the improved Open ID Connect protocol, and then, in order to verify the authentication and secrecy of the improved protocol, the authentication and secrecy are modeled using non-monojection and query, respectively. Finally, the Pi calculus model of the improved Open ID Connect protocol is transformed into the input of the security protocol analysis tool ProVerif, and the formal analysis is carried out by using ProVerif. Experimental results show that the improved Open ID Connect protocol is authenticated and secret.
【作者单位】：中南民族大学计算机科学学院;
【基金】：国家自然科学基金资助项目(61272497) 湖北省自然科学基金资助项目(2014CFB249)~~
【分类号】：TP393.08

【相似文献】