Identity-no-pairing-based secret key agreement method for wireless network cross-domain switching authentication

Abstract

The invention relates to an identity-no-pairing-based secret key agreement method for wireless network cross-domain switching authentication. According to the method provided by the invention at a request handover stage, a bilinear pairing operation that is generated by a user and is involved in secret key sharing with a home-domain authentication server is replaced, so that the calculation cost of the user is lowered; and at a user identity authentication stage, the home-domain authentication server calculates a secret key shared with the user to realize consistency with the shared key generated by the user and the bilinear pairing operation for shared key calculation by the home-domain authentication server is replaced. With the method, because no bilinear pairing operation is applied to the user and the home-domain authentication server, the switching authentication efficiency is improved. At the key agreement stage, the session key for agreement between the user and a foreign-domain authentication server not only includes temporary keys of the two sides but also includes respective long-term private keys; and as long as the long-term private key of one side is not leaked, the security of the agreement session key is ensured, so that the attack of the temporary keys leakage is resisted.

Description

technical field [0001] The invention relates to a key negotiation method for identity-unpaired wireless network cross-domain handover authentication. Background technique [0002] In a wireless network, seamless and secure handover of users across domains is one of the important services, that is, when a user moves from the home domain to a foreign domain, the connection can be maintained without restriction. In order to achieve secure handover, the authentication server in the foreign region needs to authenticate the user's identity and negotiate the session key. However, since the authentication server in the foreign region does not have the user's registration information, the authentication of the mobile user is realized through the participation of the authentication server in the home region, which constitutes an authentication key negotiation process involving three parties. On the basis of secure switching authentication and key negotiation, it should also provide u...

AI Technical Summary

Problems solved by technology

However, for the situation where the attacker uses his own ability to obtain the temporary private key of both parties, the attacker can generate the session key negotiated between the user and the authentication server in the foreign region, so this method is difficult to resist the temporary private key disclosure attack initiated by the attacker