一种无线切换认证协议的性能改进

摘要

The handover authentication protocol is crucial to ensure the mobile node handover between multiple access points in the wireless network quickly and securely.Due to the limitation of computing performance,storage and battery capacity of mobile nodes,handover authentication protocols must be designed with full consideration of these features.In terms of the limitation of large computation cost with pairing in the existing HashHand protocol,this paper proposed a new fast handover authentication protocol,which used the point multiplication of the additive group to replace the pairing operation.The new protocol had a better performance in efficiency than that of HashHand,meanwhile satisfying the security requirements such as user anonymity,untracebility and conditional privacy protection.The user and the authentication server could authenticate mutually,establish the session key securely and refresh it periodically.The new protocol can also effectively resist replay attacks and denial of service attacks.%切换认证协议是确保移动节点在无线网络中多个接入点之间进行快速安全切换的关键,在设计切换认证协议时,必须充分考虑移动节点计算、存储能力低以及电池容量小等特点.针对无线局域网的切换认证协议HashHand双线性对运算消耗资源大的缺陷,提出了一种新的快速切换认证协议.该协议不使用对运算,仅使用加法群的点乘运算替代,提高了协议的效率,并且具有用户匿名性、不可追踪性和有条件的隐私保护性.用户与认证服务器满足互认证性,能够安全地协商会话密钥并且周期性地更新.该协议能有效地抵制重放攻击和拒绝服务攻击.