在无线通信系统中,相互认证和密钥建立协议不仅要在实现实体间的相互认证的基础上建立唯一的共享会话密钥,而且协议本身还应当满足一定的安全要求,如防止假冒攻击、服务的不可否认性等。在结合椭圆曲线密码体制优点的基础上,提出一种适于无线通信网络中的相互认证和密钥建立协议,不仅能有效防止上述攻击,还适于在无线终端设备上应用。
In a wireless mobile communication system, mutual authentication and key establishing protocols not only need to establish a shared key for encrypt information exchange in conversation on the basis of mutual authentication, but they also need to satisfy essential security requirements, including forward secrecy, impersonated attack and man-in-middle attack, etc. This paper provides security analysis of a mutual authentication and key establishing protocol based on elliptic curve cryptography for wireless communication, which can withstand the above attacks and can be used in wireless terminals.