基于模糊属性的跨校无线漫游认证机制研究

发布时间：2019-04-23 14:31

【摘要】：随着移动互联的发展,针对多个学校网络用户漫游时的认证问题,利用双线性对的特性,基于Shamir的拉格朗日差值多项式,提出了一种基于模糊属性的跨校无线漫游认证机制,方案中只有拥有不少于系统发布的授权属性集中一定个数的用户才可以被认证成功。该机制不涉及用户身份隐私信息,通过用户属性更新机制及漫游用户更新机制,对被认证用户的描述更加灵活,确保了认证的正确执行及用户信息的安全;同时不需要将用户信息返回到原属学校进行认证,提高了认证效率。分析和实践表明,此机制可抵抗中间人攻击、重放攻击和合谋攻击,可满足无线网络环境用户漫游认证的安全需求,为多个学校间学术交流和资源共享提供了保障。
[Abstract]:With the development of mobile interconnection, a cross-school wireless roaming authentication mechanism based on fuzzy attributes is proposed based on the Lagrange difference polynomial of Shamir and the characteristics of bilinear pairs in order to solve the authentication problem of users roaming in multiple school networks. In the scheme, only those users who have not less than the authorized attribute set published by the system can be authenticated successfully. This mechanism does not involve the user's identity privacy information, through the user attribute update mechanism and roaming user update mechanism, the description of the authenticated user is more flexible, ensuring the correct implementation of the authentication and the security of the user information; At the same time, there is no need to return the user information to the original school for authentication, which improves the authentication efficiency. The analysis and practice show that this mechanism can resist man-in-the-middle attack, replay attack and collusion attack. It can meet the security requirements of user roaming authentication in wireless network environment, and provide guarantee for academic communication and resource sharing among many schools.
【作者单位】：中山大学信息科学与技术学院;暨南大学信息科学技术学院;中山大学软件学院;华南师范大学计算机学院;
【基金】：国家自然科学基金(61272067,61272415) 广东省自然科学基金(S2013010013728,S2012030006242) 广东省研究和技术项目(2012A080102007,2012B040305008) 广东省工程中心项目(GCZX-A1103) 广州市重点实验室开放基金(2012-224)~~
【分类号】：TN92

【参考文献】