多域与多服务器环境下的两类密钥协商方案研究

发布时间：2018-04-23 10:24

本文选题：切比雪夫混沌映射 + 单次注册　；参考：《沈阳师范大学》2017年硕士论文

【摘要】：随着计算机通信技术的发展以及网络的遍及程度的提高,信息安全问题不容忽视。密码学是信息安全的基础,是保障信息安全的首要手段,它所解决的问题就是确保参与通信的实体能够在存在攻击者的网络中实现可靠的通信,并且保证通信信息的秘密性。认证及密钥协商协议是重要的密码学原语,参与实体可以通过协议生成秘密会话密钥,而后利用现有的加密技术来实现通信实体间的安全通信。在多服务器的环境中,每个用户都是先经过认证中心的认证后,再登录到相应的服务器来获得服务。如果用户处于单一的认证结构中,那么用户必须每次都与不同的服务器进行认证,同时记住用于认证各个服务器的身份和密码以便以后登录该服务器并获得服务,这对于用户来说是很不方便的。为了方便用户登录到各类服务器,多服务器环境下的认证及密钥协商协议应运而生。从根本上说,每个用户只需在认证中心获得一个安全账号,然后用户使用该安全账号来通过认证中心的认证后,便可以便捷的获得多个不同类型服务器的服务。这个概念也是多服务结构中的最重要的特征:单次注册。同时,这种多服务器环境下的认证及密钥协商协议也可以扩展到多域网络中,而不是单单局限于一个网络域。本文的主要研究成果如下:1.针对单一认证结构中,用户需要反复登陆不同服务器的问题。本文设计了多服务器环境下的认证及密钥交换协议。与大多数协议不同,本文所设计的协议是单向认证的协议,而不是现有大多数AKE和MSAKE协议所强调的相互认证。同时本文提出的协议是基于切比雪夫混沌映射运算而设计的,无需使用椭圆曲线的模幂运算和标量乘法。在安全方面,该协议可以抵制目前主流攻击,诸如伪装攻击,中间人攻击等。在功能方面,该协议实现单向AKE的主要功能,如完美的前向保密性和较高的执行效率。2.针对一些在多服务器环境下所设计的AKE协议只是在一个网络域的范围内进行设计的问题。本文提出了一个多域环境下基于混沌映射的可证明口令认证及密钥交换协议。主要解决在不同域中,比如分布式的网络结构中,在两个不同服务器上登陆的用户之间如何实现安全通信的问题。新的协议是基于切比雪夫混沌映射运算而设计的,使用口令认证。在保证了极好的安全性的同时,新的协议也更方便扩展,比如扩展为在不同域中的三方或者多方协议。
[Abstract]:With the development of computer communication technology and the improvement of network pervasiveness, the problem of information security can not be ignored. Cryptography is the basis of information security and the primary means to ensure information security. The problem it solves is to ensure that the entity involved in communication can realize reliable communication in the network where the attacker exists and to ensure the confidentiality of the communication information. Authentication and key agreement protocols are important cryptographic primitives. Participating entities can generate secret session keys through the protocols and then use existing encryption techniques to realize secure communication between communication entities. In a multi-server environment, each user is authenticated by the authentication authority and then logged in to the corresponding server to obtain services. If the user is in a single authentication structure, the user must authenticate each time with a different server, remembering the identity and password used to authenticate each server in order to log in to the server and get the service later, This is very inconvenient for users. In order to facilitate users to log on to all kinds of servers, authentication and key agreement protocols in multi-server environment emerge as the times require. Fundamentally, each user only needs to obtain a security account in the authentication center, and then the user can easily obtain the services of multiple different types of servers by using the security account to pass the authentication of the authentication center. This concept is also the most important feature of multi-service architecture: single registration. At the same time, the authentication and key agreement protocol in multi-server environment can be extended to multi-domain network rather than just one domain. The main research results of this paper are as follows: 1. In the single authentication structure, users need to log on to different servers repeatedly. This paper designs the authentication and key exchange protocol in multi-server environment. Unlike most protocols, the protocol designed in this paper is a one-way authentication protocol, rather than the mutual authentication emphasized by most existing AKE and MSAKE protocols. At the same time, the proposed protocol is based on Chebyshev chaotic mapping operation, without the use of elliptic curve modular power operation and scalar multiplication. In terms of security, the protocol can resist current mainstream attacks, such as camouflage attacks, middleman attacks, etc. In terms of function, the protocol implements the main functions of unidirectional AKE, such as perfect forward confidentiality and high execution efficiency. In order to solve the problem that some AKE protocols designed in multi-server environment are only designed in a network domain. In this paper, a provable password authentication and key exchange protocol based on chaotic mapping in multi-domain environment is proposed. It mainly solves the problem of how to realize secure communication between users who log in on two different servers in different domains, such as distributed network structure. The new protocol is based on Chebyshev chaotic mapping operation and uses password authentication. While ensuring excellent security, the new protocols are easier to extend, such as tripartite or multi-party protocols in different domains.
【学位授予单位】：沈阳师范大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TN918.4

【相似文献】