无线体域网中的认证协议研究

发布时间：2018-02-02 18:51

本文关键词： 无证书签名算法双向认证匿名性会话密钥建立　出处：《西安电子科技大学》2014年硕士论文　论文类型：学位论文

【摘要】：随着无线传感器技术的发展,以人为中心的无线体域网吸引了学术界和商业界的大量关注。无线体域网是由数个放置在人体不同身体部位的传感器节点或便携式移动设备组成的,可连续监测人体特定部位的生理信息,提供各种无线应用。但是,由于开放的无线环境以及缺乏物理保护,无线体域网系统不可避免的存在各种攻击和安全隐患。设计安全的认证协议实现通信实体之间的双向认证,防止用户的个人信息被泄露是无线体域网应用推广中遇到的一大难题。本论文首先研究了一种已有的无线体域网远程匿名认证协议,通过分析发现,该协议并没有实现完整的匿名性,而且不能抵抗恶意网络管理者的攻击,同时该协议建立的会话密钥是不安全的。为了解决以上安全问题,本论文提出了一种新的、可证明安全的无证书签名算法。该签名算法中用户的私钥并不是完全由可信第三方生成,而是由用户和可信第三方共同生成,改变了传统情况下用户完全信任第三方,认为第三方不会越权操作以及执行不利于用户的未授权行为的思路。然后本论文基于新的签名算法提出了一种适用于无线体域网的无证书远程匿名认证协议,该认证协议具有如下优点:(1)该协议将用户自身的身份和公钥同时发送给第三方得到一个系统账号,该系统账号并不是用户的真实身份,但是却可以在系统中唯一标识用户从而达到隐藏用户真实身份的目的,实现用户匿名享受服务。同时,由于第三方并不知道用户的私钥,所以不管第三方是完全可信或是不完全可信,在之后的认证过程中第三方将无法执行未授权操作损害用户利益;(2)该协议实现了参与实体之间的双向认证,并且在参与实体进行认证的同时完成了会话密钥的协商。该会话密钥的建立依赖于参与双方选择的随机数,所以除了参与双方没有人可以计算得到会话过程中的会话密钥;(3)该协议使用新的可证安全的签名算法,进一步保证了协议的安全性。最后,我们对提出的远程匿名认证协议进行了性能仿真,测试分析了该协议的消息长度、计算复杂度和能量消耗,并与其他已有方案进行了比较,结果显示新方案在安全性和性能上达到了更好的平衡和折中。
[Abstract]:With the development of wireless sensor technology. The human-centered wireless body area network has attracted a lot of attention from academia and business circles. Wireless body area network is composed of several sensor nodes or portable mobile devices placed in different body parts of the human body. Physiological information of specific parts of the human body can be continuously monitored to provide a variety of wireless applications. However, due to an open wireless environment and lack of physical protection. Wireless body area network system inevitably has a variety of attacks and security risks. Design a secure authentication protocol to achieve two-way authentication between communication entities. To prevent the personal information of users from being leaked is a difficult problem in the application promotion of wireless body area network. Firstly, this paper studies an existing remote anonymous authentication protocol of wireless body area network, and finds out through analysis. The protocol does not achieve complete anonymity, and can not resist the attack of malicious network administrators, and the session key established by the protocol is not secure. In order to solve the above security problems. In this paper, a new certificateless signature algorithm is proposed, in which the private key of the user is not generated entirely by a trusted third party, but by a user and a trusted third party. Changing the tradition of users fully trusting third parties. It is considered that the third party will not overstep the authority and execute the unauthorized behavior against the user. Then based on the new signature algorithm this paper proposes a certificateless remote anonymous authentication protocol for wireless body area networks. The authentication protocol has the following advantages: (1) the protocol sends the user's identity and public key to a third party to get a system account at the same time. The system account is not the real identity of the user. However, the user can be uniquely identified in the system to hide the real identity of the user, and the user can enjoy the service anonymously. At the same time, the third party does not know the private key of the user. Therefore, no matter whether the third party is completely trusted or not fully trusted, the third party will not be able to perform unauthorized operations in the subsequent authentication process to harm the interests of the user; The protocol realizes the bidirectional authentication between the participating entities, and completes the negotiation of the session key while the participating entity authenticates. The establishment of the session key depends on the random number selected by the participants. Therefore, no one can calculate the session key in the course of the session except for the two parties involved. The protocol uses a new verifiable security signature algorithm to further ensure the security of the protocol. Finally, we simulate the performance of the proposed remote anonymous authentication protocol. The message length, computational complexity and energy consumption of the protocol are analyzed and compared with other existing schemes. The results show that the new scheme achieves a better balance and compromise in security and performance.
【学位授予单位】：西安电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN915.04

【相似文献】