通用可组合的网关口令认证密钥交换协议

发布时间：2018-05-31 09:33

本文选题：可证明安全 + 通用可组合　；参考：《计算机学报》2017年05期

【摘要】：网关口令认证密钥交换(GPAKE)协议是一类特殊的三方协议,其中客户和认证服务器共享有低熵口令,客户和网关在服务器的协助下生成高熵的会话密钥.由于通信架构更贴近实际,GPAKE协议研究近年来受到了较多的关注.然而,已有GPAKE协议都是在传统"孤立"的安全模型中进行分析和设计的,没有考虑协议的可组合安全,也没有考虑用户将相关口令用于不同协议时的影响.为了保证GPAKE协议在更接近实际应用的复杂环境下的安全性,该文在通用可组合(UC)框架下研究GPAKE协议的安全性定义,给出了GPAKE的理想功能,对会话密钥安全、防止恶意网关猜测客户口令以及保持会话密钥相对于服务器的私密性等安全目标进行了刻画,保证了协议在复杂应用环境中的可组合安全性,还考虑了用户将服从任意分布的、甚至是与其他协议相关的口令用于GPAKE协议的情况.另外,利用UC安全两方PAKE协议、消息认证码为组件,给出了GPAKE协议的一个通用构造,使其能够被实例化得到多个具体的协议,并证明了该通用构造是UC安全的,即能够UC安全实现GPAKE理想功能.
[Abstract]:Gateway password Authentication key Exchange (GPAKE) protocol is a special tripartite protocol in which the client and the authentication server share a low entropy password and the client and gateway generate a high-entropy session key with the help of the server. The research of GPAKE protocol has been paid more attention in recent years because the communication architecture is closer to the reality. However, the existing GPAKE protocols are all analyzed and designed in the traditional "isolated" security model, without considering the combinable security of the protocols and the influence of the user when using the relevant passwords for different protocols. In order to ensure the security of the GPAKE protocol in the complex environment which is closer to the practical application, this paper studies the security definition of the GPAKE protocol under the framework of universal assemblage UC, and gives the ideal function of GPAKE and the security of the session key. The security targets such as preventing malicious gateway from guessing the client password and keeping the session key private relative to the server are described, which ensures the combinable security of the protocol in the complex application environment. Even passwords associated with other protocols are used for GPAKE protocols. In addition, using UC secure two-party PAKE protocol and message authentication code as components, a general structure of GPAKE protocol is given, which can be instantiated to obtain several concrete protocols, and it is proved that the universal structure is UC secure. That is, UC can safely realize the ideal function of GPAKE.
【作者单位】：中国人民解放军信息工程大学;中国科学院软件研究所可信计算与信息保障实验室;信息保障技术重点实验室;
【基金】：国家“九七三”重点基础研究发展规划项目基金(2013CB338003,2012CB315905) 国家自然科学基金(61502527,U1536205,61379150,61572485) 中国博士后科学基金(2014M552524) 信息保障技术重点实验室开放基金(KJ-14-004)资助~~
【分类号】：TN918.4

【相似文献】