具有可信第三方的认证协议的安全性_卓继亮.pdfVIP

12 　 : 　·109 · ＊ , , (北京航空航天大学 计算机学院, 北京 100083) 　:讨论了面向通过可 第三方完成对等双方的身份认证并建立 一个安全的会话密钥需求的一类认证协 议。分析了这类协议的设计目标,将协议的安全性归纳为对协议中所建立会话密钥的四点需求:必威体育官网网址性、真实 性、新鲜性和一致性, 并进 一步通过实例说明了不满足这些需求的协议可能遭受到的攻击。最后给出对于设计 这类协议的 一些建议原则,并分析了一个设计较好的协议范例。 :身份认证;密钥交换;可 第三方;安全协议 :TP393.08 　　　:A 　　　:1001-3695 (2004 )12-0109-04 Security of Authentication Protocols Involvin T rusted Third Party Z HUO Ji-lian , LIN Hui-li, LI Xian-xian (School of Comp uter S cience Eng i neer ing , B eihang Uni versi ty , Be ij i ng 100083, Chi na ) Abstract :One class of authentication protocols oriented such a requirement which authenticates mutually and establishes a ses- sion key between the peer-to-peer entities throu h the trusted third party .are discussed.The desi n oals of this class of proto- cols are analyzed, and the security of protocols isformulated to four requirementsfor the session keys establishedfrom the proto- cols, w hich are secrecy, reality, freshness and consistency.Several examples are put out to elaborate the possible attacks on the protocols w hich are not meetin these requirements.Finally, some principals to desi n this class of protocols are su ested, and then a protocol is described as a case of ood desi n. Key words:Authentication;Key Exchan e;Trusted Third Party;Security Protocol , 1　 [6] : , 。 , 。 , , , 。 。 2 　 [1] 。, , :、。 。,