为解决无线通信网络中不同用户之间的通信安全问题,通常会采用身份认证协议来确保通信双方身份的合法性。该认证协议应能抵抗重放攻击、延时攻击等威胁,同时认证过程中的计算量应尽量小。本文针对SEAHA(secure and efficient handover authentication)认证方案存在的计算量大、不能抵抗伪装攻击的问题提出了一种基于双线性对和离散对数难题(DLP)的无证书两方认证协议。该协议中基站和节点共同生成节点密钥对来抵抗伪装攻击,利用离散对数难题生成会话密钥降低认证过程中的计算量。安全分析和性能分析结果表明,提出协议在保证安全性的前提下,有效降低了认证过程中的计算量。
With the rapid development of wireless communication network( WSN),WSN can be quickly expanded to achieve increasingly prominent independent organization,etc.,making it increasingly widespread range of applications. Generally,authentication protocols are adopted for the assurance of the legality of communication members to solve the safety problems between users in WSN. Such protocols are supposed to resist threats like replay attack,delay attack and etc. with a computational complexity that is as low as possible. We proposed a certificateless authenticated two-party protocol based on bilinear-pairing and discrete logarithm problem( DLP) to overcome existing disadvantages in secure and efficient handover authentication( SEAHA) such as high computational complexity and weakness against camouflage attack. In proposed protocol,node key is generated jointly by base and node simultaneously to resist camouflage attack,and the computational complexity in authentication process is significantly ameliorated as the session key is engendered by DLC. Security and performance analysis show that our protocol alleviated the computational complexity effectively under the premise of security.