Kerberos authentication system and based on physical unclonable function

Abstract

The invention discloses a Kerberos authentication system and method based on a physical unclonable function, and the system comprises equipment A, equipment B, and a key distribution center (KDC), wherein the key distribution center KDC comprises an authentication server (AS), a ticket granting server (TGS), and a database (DB). The method comprises the following steps: registering equipment A andequipment B in the KDC; the equipment A requests a ticket granting ticket (TGT) from the AS; the equipment A obtains the TGT; the equipment A requests a service granting ticket from the TGS; the equipment A obtains a service granting ticket (SGT); and the equipment A requests a communication service from the equipment B. According to the method, key leakage caused by physical attacks such as invasion, semi-invasion and side channel attacks of attackers can be prevented, meanwhile, the problems of high public key calculation complexity, low speed and excessive communication bandwidth occupation are solved, and the method is suitable for resource-limited network application.

Description

technical field [0001] The invention belongs to the technical field of information security and cryptographic protocols, and in particular relates to a Kerberos authentication system and method based on physical unclonable functions. Background technique [0002] The Kerberos protocol provides a two-way authentication mechanism between the client and the server or between the server and the server, using the key distribution center KDC as a trusted third party to provide authentication and key distribution services. The system is designed to implement two-way authentication services through symmetric cryptography, that is, both the client and the server can authenticate each other with the help of KDC. It can be used to prevent eavesdropping, prevent replay attacks, protect data integrity, etc. It is a system that uses a symmetric key system for key management. In 1988, Bryant et al. extended Kerberos to use public key encryption for authentication. Additionally, Windows S...

AI Technical Summary

Problems solved by technology

[0003] However, traditional authentication and key management mechanisms based on keystores or public key infrastructure are not efficient: on the one hand, attackers may leak keys through physical attacks such as intrusion, semi-intrusion, and side-channel attacks, causing the entire security system to collapse. ; On the other hand, the public key calculation complexity is high, the speed is slow, and the communication bandwidth occupies too many resources, which affects the availability of equipment and systems

Images