Authentication key negotiation method and system against continuous leakage

Abstract

The invention discloses an authentication key negotiation method and system against continuous leakage. The system is composed of two users, respectively a session initiator and a responder; and eachuser has a pair of public and private keys. The method in the invention first performs system initialization and then performs a first interaction, and the session initiator sends a message parameterto the responder; then a second interaction is carried out, and the session responder responds to the initiator with the message parameter; finally, the session initiator and the responder authenticate key negotiation, update own private keys and generate a common communication key. The authentication key negotiation method and system against continuous leakage in the invention are particularly suitable for the secure communication of both parties, are high in security as having achieved cryptographically provable security, and is high in practicability as being able to execute safely and stably still in a continuous leakage environment; and in combination with an elliptic curve and bilinear pairing technology, a session key authentication negotiation protocol against continuous leakage isproposed, and the scheme efficiency is high.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to an authentication key negotiation method and system against continuous leakage, and in particular to a combination of elliptic curve and bilinear pairing technology aimed at the needs of both communication parties for security, convenience and efficiency. An authenticated key agreement system and method capable of resisting continuous leakage attacks. Background technique [0002] With the rapid development of Internet technology, more and more users are connected to the Internet, which greatly promotes the process of social informatization. While people are enjoying the convenience and comfort brought by smart devices and the Internet, the emergence of various network attack methods poses a serious threat to data security. How to protect users' personal privacy and communication security in the process of informatization has become an important issue in today's societ...

AI Technical Summary

Problems solved by technology

In the early AKE model, the leak attack is not allowed, that is, the adversary cannot obtain any information about the secret value

However, this assumption is unrealistic in the actual environment, for example, IoT attackers can obtain part of the secret information of the node's long-term private key by measuring the electromagnetic radiation of the IoT node

Images