A Key Exchange Protocol Based on Location and Password

Abstract

The invention discloses a position and password based secret key exchange protocol. In a first phase, a main verification party sends ElGamal encryption of a password, and four verification parties carry out calculation and send positioning verification information so as to reach the position of a joining party simultaneously; in a second phase, the joining party calculates password information and position examination information; in a third phase, the four verification parties verify password and position information of the joining part, calculate a session key and return authentication information, and the main verification party sends first block information of a Hash value to the joining party; and in the fourth phase, the joining party verifies whether reception information equals the first part of the Hash value, if yes, the session key is output, and otherwise, the process is ended. The protocol is executed synchronously to realize dual authentication of password and position.An opponent can only implement pseudo authentication by guessing the password online but not carry out verification in a position inconsistent with a declared position by pretending to be the joiningparty, and any fake in the position and password by the opponent leads to failure in authentication.

Description

technical field [0001] The present invention relates to a key exchange protocol based on location and password. Background technique [0002] Password is an important security authentication method, and the location of the participant can also be used as a method for identity authentication. Among them, password-based key exchange needs to face the challenge of generating high-entropy session keys from low-entropy keys. The current password-based key exchange protocol is mainly used in the scene of the server client, and the mainstream technology adopts the encryption scheme of chosen ciphertext security (CCA2) security and the structure of smooth projective hash function (smooth projective hash function). In real production and life, location information is also an important type of authentication information, such as drone control stations, military base communications, etc. Usually the existing technology can easily judge the distance through the propagation speed and t...

AI Technical Summary

Problems solved by technology

Among them, the password-based key exchange form needs to face the challenge of generating high-entropy session keys from low-entropy (low-entropy) keys.

Images