针对现有的代理移动IPv6认证方案存在的系统开销大和不能抵御暴力攻击的问题,提出了一种基于无证书签密的代理移动IPv6认证方案。该方案结合了无证书签密和代理移动IPv6的实际环境,在实现对移动节点认证的同时有效地解决了无线环境中密钥管理问题。对方案的安全性进行形式化分析证明,该方案在随机预言机模型下是可证明安全的。同时,效率分析表明,该方案不仅减少了节点之间的交互,而且保持了较小的计算量。
The proposed authentication scheme in proxy mobile IPv6 network has the flaw of system requirement and cannot resist the dictionary attack.To solve these problems,this paper proposed an authentication scheme based on certificateless signcryption in proxy mobile IPv6 network.The proposed scheme could not only realize mutual authentication between the endpoints but also simplify the key management in wireless mobile environment.Performance analysis results show that the proposed mechanism is very efficient.Finally,it proved the new scheme's security in the random oracle model.