欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
针对IKEv2初始交换存在认证失败和发起者的身份暴露问题，提出了一种改进协议．新的协议采用SIGn-and-Mac认证方法来完成显式密钥认证，并且在协议中让响应者首先证明自己的身份，实现对协议发起者的主动身份保护．同时协议双方在自己发送的消息中包含期望的消息接收者来防止认证失败．另外协议中还引入了不可否认性，使得协议交互双方对自己发送的消息内容不可抵赖．分析表明：新的协议在Canetti-Krawczyk模型中是会话密钥安全的，并且性能上相对于IKEv2仅仅增加了一次对称加密运算，大大优于IKEv1．
英文摘要：
IKEv2 can not achieve active identity protection to initiator in initial exchange, and it has the security flaw of authentication failure. So an improvement protocol is presented. In the new protocol, the SIGn-and-MAc approach is adopted to realize explicit key authentication and the responder is first authenticated to actively protect the initiator＇s identity. By including the peer＇s identity in the sending messages, the new protocol solves the problem of authentication failure. Moreover, the non-repudiation of the peers for their interactions is also achieved. The analysis results show that our protocol is session key secure and has a good performance.
同期刊论文项目
同项目期刊论文
位置：