摘要： 在混合云环境下，为满足身份认证方案在不同密码系统之间的跨域认证需求，提出一种基于公共密钥基础设施（PKI）和无证书密码体制（CLC）的跨域身份认证方案。引入基于PKI的多中心认证管理机制，对不同密码系统安全域的用户匿名身份进行管控和追踪。在用户和云服务提供商的双向认证过程中，完成会话密钥的协商和不同密码系统匿名身份的转换。分析结果表明，该方案在实现不同密码系统之间跨域身份认证的同时，可抵抗重放攻击、替换攻击和中间人攻击，具有较高的安全性及计算效率。

关键词: 混合云, 异构系统, 跨域认证, 匿名性, 双向认证

Abstract: In the hybrid cloud environment,in order to meet the cross-domain authentication requirements of identity authentication schemes between different cryptosystems,a cross-domain identity authentication scheme based on Public Key Infrastructure(PKI) and Certificateless Cryptography(CLC) is proposed.The PKI-based multi-center authentication management mechanism is introduced to control and track the anonymous identity of users in different cryptosystem security domains.In the bidirectional authentication process between the user and the cloud service provider,the negotiation of the session key and the conversion of the anonymous identity of different cryptosystems are completed.The analysis results show that the scheme can resist replay attacks,replacement attacks and man-in-the-middle attacks while achieving cross-domain identity authentication between different cryptosystems,and it has high security and computational efficiency.

Key words: hybrid cloud, heterogeneous system, cross-domain authentication, anonymity, bidirectional authentication

中图分类号: 

• TP391