无线局域网中基于身份签名的接入认证方案

doi:10.3969/j.issn.1000-3428.2014.12.020

计算机工程 ›› 2014, Vol. 40 ›› Issue (12): 108-113. doi: 10.3969/j.issn.1000-3428.2014.12.020

无线局域网中基于身份签名的接入认证方案

王志蓬^1a,1c,林慕清^1b,季东杰^1b,徐剑^1a,2

1.东北大学 a.软件学院; b.信息科学与工程学院; c.继续教育学院,沈阳 110819;
2.中国科学院信息工程研究所信息安全国家重点实验室北京 100093

收稿日期:2013-12-09 修回日期:2014-02-18 出版日期:2014-12-15 发布日期:2015-01-16
作者简介:王志蓬(1975-),男,工程师、硕士研究生,主研方向:密码学,网络安全,云计算;林慕清、季东杰,硕士研究生;徐剑(通讯作者),讲师、博士。
基金资助:
国家科技重大专项基金资助项目(2013ZX03002006);中央高校基本科研业务费专项基金资助项目(N130317002);辽宁省博士启动基金资助项目(20141012);沈阳市科技计划基金资助项目(F14-231-1-08)。

Access Authentication Scheme Using Identity-based Signature in Wireless Local Area Network

WANG Zhipeng^1a,1c,LIN Muqing^1b,JI Dongjie^1b,XU Jian^1a,2

1a.College of Software; 1b.College of Information Science and Engineering;1c.College of Continuing Education, Northeastern University,Shenyang 110819,China; 2.State Key Laboratory of Information Security, Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China

Received:2013-12-09 Revised:2014-02-18 Online:2014-12-15 Published:2015-01-16

摘要/Abstract

摘要： 目前无线局域网中的典型接入认证方案不能较好地支持双向认证,并且效率较低。针对上述问题,利用基于身份签名技术,提出一种新的双向接入认证方案。给出方案的初始化过程、实体间认证协议以及基于该接入认证方案的密钥协商协议,并对密钥协商协议进行效率和安全性分析,结果表明,该协议能以较小的计算代价,实现已知密钥安全、前向安全、未知密钥分享和密钥控制。与EAP-TLS和WAPI2接入认证方案相比,该方案具有无证书、双向认证以及认证效率高等优势。

关键词: 无线局域网, 双向接入认证, 基于身份签名, 密钥协商, EAP-TLS方案, WAPI方案

Abstract: Aiming at the problems such as bidirectional access authentication can not be supported and low efficiency in typical Wireless Local Area Network(WLAN) access authentication schemes,this paper proposes a bidirectional access authentication scheme using the Identity-based Signature(IBS).The scheme’s initialization process,inter-entity authentication protocol,and an efficient key agreement protocol based on that access authentication scheme are given.The efficiency and safety property of the key agreement protocol are analyzed.Results show that this protocol not only has the expense of small computational cost,but also achieves known key security,forward security,unknown key sharing and key control.This is the advantage that other similar protocols do not have.Finally,this paper compares the proposed scheme with EAP-TLS and WAPI scheme in the aspects of performance,the results show that the proposed scheme has advantages of no certificate,mutual authentication and efficient authenticating.

Key words: Wireless Local Area Network(WLAN), bidirectional access authentication, Identity-based Signature(IBS), key agreement, EAP-TLS scheme, WAPI scheme

中图分类号:

TP309

王志蓬,林慕清,季东杰,徐剑. 无线局域网中基于身份签名的接入认证方案[J]. 计算机工程, 2014, 40(12): 108-113.

WANG Zhipeng,LIN Muqing,JI Dongjie,XU Jian. Access Authentication Scheme Using Identity-based Signature in Wireless Local Area Network[J]. Computer Engineering, 2014, 40(12): 108-113.

https://www.ecice06.com/CN/Y2014/V40/I12/108

参考文献

[1] Deng Zhian,Xu Yubin,Ma Lin.Indoor Positioning via Nonlinear Discriminative Feature Extraction in Wireless Local Area Network[J].Computer Communications,2012,35(6):738-747.
[2] 张招亮,陈海明,黄庭培,等.无线传感器网络中一种抗无线局域网干扰的信道分配机制[J].计算机学报,35(3):504-517.
[3] Guo Minghuang,Liaw H T,Chen J F,et al.Secure Authentication Mechanism for RFID Tag in WLAN Con-vergence 3G Networks[J].Security and Communica-tion Networks,2012,5(3):319-330.
[4] 刘振华,周颢,赵保华.无线局域网自适应安全管理框架及其应用[J].西安交通大学学报,2010,44(4):34-38.
[5] 杨力,马建峰,裴庆祺,等.直接匿名的无线网络可信接入认证方案[J].通信学报,2012,31(8):99-104.
[6] Jiang Yixin,Lin Chuang,Yin Hao,et al.A Mutual Authentication and Privacy Mechanism for WLAN Security:Research Articles[J].Wireless Communications and Mobile Computing,2008,8(1):101-112.
[7] Tseng Yuh-Min.USIM-based EAP-TLS Authentication Protocol for Wireless Local Area Networks[J].Computer Standards & Interfaces,2009,31(1):128-136.
[8] 姜奇,马建峰,李光松,等.基于WAPI的WLAN与3G网络安全融合[J].计算机学报,2010,33(9):1675-1685.
[9] Kim M,Kim K.A New Identification Scheme Based on the Bilinear Diffie-Hellman Problem[C]//Proceedings of ACISP’02.Melbourne,Australia:Springer-Verlag,2002:362-378.
[10] Zhang Zhengfeng,Xu Jin,Feng Dengguo.Attack on an Identification Scheme Based on Gap Diffie-Hellman Problem[EB/OL].[2013-12-11].http://eprint.iacr.org/2003/153.pdf.
[11] 彭华熹.一种基于身份的多信任域认证模型[J].计算机学报,2006,29(8):1271-1281.
[12] 朱辉,李晖,苏万力,等.基于身份的匿名无线认证方案[J].通信学报,2009,30(4):130-136.
[13] Haddad W.Using Cryptographically Generated Addresses(CGA) to Secure HMIPv6 Protocol(HMIPv6 sec)[R].RFC 3972,2006.
[14] Kandikattu R,Jacob L.A Secure IPv6-based Urban Wireless Mesh Network(SUMNv6)[J].Computer Communications,2008,31(15):3707-3718.
[15] 高天寒,郭楠,朱志良.节点证书与身份相结合的 HMIPv6 网络接入认证机制[J].软件学报,2012,23(9):2465-2480.
[16] Boneh D,Franklin M.Identity-based Encryption from the Weil Pairing[C]//Proceedings of CRYPTO’01.Berlin,Germany:Springer,2001:213-229.
[17] Cha J C,Cheon J H.An Identity-based Signature from Gap Diffie-Hellman Groups[C]//Proceedings of PKC’03.Miami,USA:[s.n.],2003:18-30.
[18] Boneh D,Lynn B,Shacham H.Short Signatures from the Weil Pairing[C]//Proceedings of ASIACRYPT’01.Berlin,Germany:Springer,2001:514-532.
[19] Smart N P.Identity-based Authenticated Key Agreement Protocol Based on Weil Pairing[J].Electronics Letters,2002,38(13):630-632.
[20] Shim K.Efficient ID-based Authenticated Key Agreement Protocol Based on Weil Pairing[J].Electronics Letters,2003,39(8):653-654.
[21] Chen L,Kudla C.Identity Based Authenticated Key Agreement Protocols from Pairings[C]//Proceedings of the 16th IEEE Computer Security Foundations Workshop.[S.l.]:IEEE Press,2003:219-233.

选择文件类型/文献管理软件名称

选择包含的内容

无线局域网中基于身份签名的接入认证方案

Access Authentication Scheme Using Identity-based Signature in Wireless Local Area Network

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价

[1]	徐晓锋, 张闽, 钱晨喜, 陈清华. IEEE 802.11ax密集WLAN的干扰协调策略[J]. 计算机工程, 2021, 47(1): 182-187,195.
[2]	孙海燕, 李玲玲, 张玲, 张建伟, 黄万伟. 一种增强的移动互联网身份基认证密钥协商协议[J]. 计算机工程, 2019, 45(9): 153-160,182.
[3]	顾洁, 朱宗卫, 徐友庆, 周世斌, 李奥, 张国鹏. NS-3仿真环境中IEEE802.11服务区分机制的研究[J]. 计算机工程, 2019, 45(8): 135-140.
[4]	刘建航, 李大伟, 黄庭培, 姜忠泰, 李世宝. 联合动态聚合帧长机制的速率自适应算法[J]. 计算机工程, 2019, 45(12): 91-97.
[5]	王彩芬,陈丽,张玉磊. 基于理想格的用户匿名口令认证密钥协商协议[J]. 计算机工程, 2018, 44(4): 212-217.
[6]	陈振宇,杨阳,季赛,刘文杰. 基于量子委托计算模式的半量子密钥协商[J]. 计算机工程, 2018, 44(3): 178-181,188.
[7]	杨小东,肖立坤,李雨桐,陈春霖,王彩芬. 一个高效的基于身份签名方案的安全性分析[J]. 计算机工程, 2018, 44(11): 115-118.
[8]	向新银. 格上基于身份的前向安全签名方案[J]. 计算机工程, 2015, 41(9): 155-158.
[9]	向新银. 格上适应性安全可撤销的基于身份签名方案[J]. 计算机工程, 2015, 41(10): 126-129.
[10]	彭春华,徐湘淄. 虚拟空闲时间对非饱和状态DCF性能的影响[J]. 计算机工程, 2015, 41(1): 96-102.
[11]	王悦，刘灿涛，朱雷，张书云. NS-2无线物理层实现与衰落功能扩展研究[J]. 计算机工程, 2014, 40(7): 58-61.
[12]	谢代军，孔范增，胡捍英. 终端异质下位置指纹的鲁棒性研究[J]. 计算机工程, 2014, 40(5): 81-85.
[13]	王涛，黎文伟. 基于接收端的WLAN误码丢包原因识别方法[J]. 计算机工程, 2014, 40(4): 76-80.
[14]	王永涛，宋璟，贺强，刘照辉. 一个基于属性的密钥协商协议[J]. 计算机工程, 2014, 40(2): 134-139.
[15]	刘松，果乃福，谢帆，张丽，李淼. UC安全的双向口令认证密钥协商协议[J]. 计算机工程, 2014, 40(2): 140-143,147.

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

无线局域网中基于身份签名的接入认证方案

Access Authentication Scheme Using Identity-based Signature in Wireless Local Area Network

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价