论文部分内容阅读
针对当前移动端用户在使用移动互联网时不断提升的对匿名认证和保密通信服务的需求,提出一种基于哈希函数、伪随机数发生器的匿名身份认证及密钥协商方案.本方案使用哈希函数、伪随机数发生器代替公钥密码体制和时间同步系统,提高了系统性能;并且在用户设备以及服务器上设定不同的保存加密信息的方法,实现不同形式的匿名认证,最终协商出安全的会话密钥.通过安全性分析、功能和性能的比较表明该方案具有较好的安全性,灵活和实用性,同时能够保持良好的通信效率.
Aiming at the demand of anonymous authentication and confidential communication service which the current mobile terminal users are increasing while using the mobile Internet, an anonymous identity authentication and key agreement scheme based on a hash function and a pseudo-random number generator is proposed. Hypothesized random number generator instead of public key cryptosystem and time synchronization system to improve the system performance; and set different ways to save encrypted information on the user equipment and server to achieve different forms of anonymous authentication, finally negotiated Secure session key.Comparing the function and performance through security analysis shows that the scheme has better security, flexibility and practicability while maintaining good communication efficiency.