为了实现移动环境中各种应用服务的安全性,提出了一种移动环境中的分布式服务访问认证协议.该协议基于短消息服务的普遍性,使用短消息服务承载认证消息,实现了多用户和多服务间的双向实体认证,移动终端仅需向应用服务器发送1条短消息就能完成认证过程,通信开销少,用户操作简便,支持不同信任域间的跨域服务访问认证;采用混合密码体制,利用智能卡实现了用户安全管理,哈希链机制的使用减少了系统再认证的开销,认证中心只需参与首次认证和密钥协商过程,不会形成系统瓶颈;提供了用户匿名性、抗抵赖性等安全性措施.
In order to achieve secure mobile application services, a distributed authentication protocol is presented. Based on the pervasiveness of SMS (short message service), the protocol uses SMS messages to transmit authentication data. It provides the mutual authentication between any users and any application services in local area or different trusted areas. Mobile stations only need to send one short message to services. The protocol adopts the hybrid cryptography. Smart cards in it are to protect users J secret. The protocol uses hash chain mechanism to decrease protocol cost for next authentication between user and service. Hence, the user's computation cost and the communication cost fit mobile station. Furthermore, the protocol provides more security features, such as user anonymity, non-repudiation and et al.