Efficient heterogeneous authentication key negotiation system and method and medium

Abstract

The invention discloses an efficient heterogeneous authentication key negotiation system and method and a medium, and relates to the technical field of communication security, and the system comprises a private key generation center PKG, a certificate center CA, a mobile device MD and a server. The mobile device MD uses the IBC; the private key generation center PKG is responsible for generating a long-term private key for the mobile device MD; the server uses the PKI; the certificate center CA is responsible for issuing a public key certificate to the server; a mobile device (MD) and a server carry out authentication key negotiation, and a method and a medium are correspondingly provided. According to the method, the advantages of IBC and PKI are fused, the calculation burden of mobile equipment is reduced (only one-time point multiplication and two-time exponential operation are needed), forward security, temporary key leakage resistance and identity privacy protection are provided under the eCK model, and the method is suitable for resource-limited cross-domain communication of the Internet of Things.

Description

Technical Field

[0001] The present invention relates to the field of communication security technology, and in particular to an efficient heterogeneous authentication key negotiation system, method and medium. Background Art

[0002] The statements in this section merely provide background information related to the present disclosure and may not constitute prior art.

[0003] With the rapid development of network technology, network coverage has expanded, more devices are connected to the internet, and wireless communications in open networks have become more frequent. Different communication devices and servers may use different public key cryptography systems depending on their configurations and surrounding environments. Furthermore, cross-domain or heterogeneous network communications may occur. For example, a sender may use identity-based cryptography (IBC) while a receiver uses cryptography based on public key infrastructure (PKI). In such cases, cryptographic protocols designed for the same public key cryptography system may no longer be applicable. For example, an authenticated key agreement method designed for PKI would be unable to provide authentication and key agreement services for both users.

[0004] In response to the above problems, the currently available solutions mainly have the following problems: 1. High computing cost: Mobile IoT devices typically have relatively limited computing power and storage space, and the amount of computing they must undertake should be as small as possible. 2. High communication overhead: Due to the bandwidth and latency limitations of message transmission in different application scenarios, messages that are too long or the number of communication rounds that is too high will result in untimely server responses.

[0005] 3. Poor security: The authentication key negotiation method should ensure that both communicating parties complete bidirectional authentication and key negotiation while also meeting forward security requirements and resisting attacks such as temporary key leakage. Summary of the Invention

[0006] The objects of the present invention are: Against the backdrop of the rapid development of IoT technology, ensuring secure cross-domain communication among IoT devices is of great research significance. Numerous authenticated key agreement protocols have been proposed for traditional public-key cryptography, but relatively few have been proposed for heterogeneous public-key cryptography. These protocols present numerous challenges, such as high computational and communication overheads, and poor security. Therefore, this paper proposes a heterogeneous authenticated key agreement protocol suitable for resource-constrained devices to address these issues.

[0007] The technical solutions of the present invention are as follows: The present invention proposes an efficient heterogeneous authentication key agreement system, comprising: Private key generation center PKG, certificate center CA, mobile device MD and server; Among them, the mobile device MD uses IBC; the private key generation center PKG is responsible for generating long-term private keys for the mobile device MD; the server uses PKI; the certificate center CA is responsible for issuing public key certificates for the server; the mobile device MD and the server perform authentication key negotiation.

[0008] The present invention also proposes an efficient heterogeneous authentication key agreement method, based on the above-mentioned efficient heterogeneous authentication key agreement system, comprising: System initialization: Select a large prime number ,definition additive cyclic group of order and the multiplicative cyclic group , select bilinear pairings , generating an additive cyclic group Generators of and the multiplicative cyclic group Generators of , and disclose system parameters ;in, are five collision-resistant hash functions, public keys , Generate the private key of the central PKG for the private key; Registration phase: The mobile device MD submits its identity to the private key generation center PKG , the private key generation center PKG generates the long-term private key of the mobile device MD , and Sent to the mobile device MD, where A random number; the server generates a private key and public key And issue a public key certificate through the certificate center CA; Authentication and key negotiation phase: Step S1: The mobile device MD generates a random number , and calculate 、 、 、 , and Sent as an initial message to the server; Step S2: Server calculation and ; Step S3: Verify the equation Is it true? If so, the server generates a random number , and calculate 、 、 ;Will Sent as a reply message to the mobile device MD; Step S4: After receiving the response message, the mobile device MD calculates ; Step S5: Verify the equation Is it true? If so, the mobile device MD confirms that both parties have successfully calculated the same session key ; Mobile device MD calculates hash value As a key confirmation message, it will be sent to the server; Step S6: The server receives the message After that, verify the equation Is it true? If so, the server confirms that both parties have successfully calculated the same session key .

[0009] Furthermore, five collision-resistant hash functions , , , , ; from Randomly select as the private key and calculate the corresponding public key .

[0010] Furthermore, the private key generation center PKG Randomly select , and calculate as follows Long-term private key: .

[0011] Furthermore, the step S1 includes: .

[0012] Furthermore, the step S2 includes: .

[0013] Furthermore, the step S3 includes: .

[0014] Furthermore, the step S4 includes: .

[0015] Furthermore, the step S5 includes: .

[0016] The present invention also proposes a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the above-mentioned efficient heterogeneous authentication key agreement method are implemented.

[0017] Compared with the existing technology, the beneficial effects of the present invention are: 1. IBC does not require the complex management process of public key certificates, making it more suitable for entities with limited resource allocation, such as mobile IoT devices. 2. In the proposed method, the computational cost of the mobile IoT device is low, as it only needs to perform one dot product calculation and two exponential calculations; 3. The proposed method is provably secure under the eCK model and can provide two-way authentication, forward security, and resistance to temporary key leakage attacks. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 This is a block diagram of the principle of an efficient heterogeneous authentication key agreement system. DETAILED DESCRIPTION

[0019] It should be noted that relational terms such as "first" and "second" are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article, or apparatus comprising the element.

[0020] The features and performance of the present invention are further described in detail below with reference to the embodiments.

[0021] Example 1 See also Figure 1 , the present invention proposes an efficient heterogeneous authentication key agreement system, including: Private key generation center PKG, certificate center CA, mobile device MD and server; Among them, the mobile device MD uses IBC; the private key generation center PKG is responsible for generating long-term private keys for the mobile device MD; the server uses PKI; the certificate center CA is responsible for issuing public key certificates for the server; the mobile device MD and the server perform authentication key negotiation.

[0022] The present invention also proposes an efficient heterogeneous authentication key agreement method, based on the above-mentioned efficient heterogeneous authentication key agreement system, comprising: System initialization: Select a large prime number ,definition additive cyclic group of order and the multiplicative cyclic group , select bilinear pairings (From the group Mapping to Group Bilinear pairings of ), generating an additive cyclic group Generators of and the multiplicative cyclic group Generators of ( ), and expose system parameters ;in, are five collision-resistant hash functions, public keys , Generate the private key of the central PKG for the private key; Registration phase: The mobile device MD submits its identity to the private key generation center PKG , the private key generation center PKG generates the long-term private key of the mobile device MD , and send it through a secure channel Sent to the mobile device MD, where A random number; the server generates a private key and public key and issue a public key certificate through the certificate authority CA; that is, the server Randomly select a private key , and calculate the corresponding public key , the server will send the public key and other relevant information to the certificate authority (CA) to apply for a public key certificate (it should be noted that the specific application steps are known to those skilled in the art and will not be described in detail here); Authentication and key negotiation phase: Step S1: The mobile device MD generates a random number , and calculate according to the following formula to obtain 、 、 、 : .

[0023] and will Sent as an initial message to the server; Step S2: After receiving the message, the server calculates and :

[0024] Step S3: Verify the equation Is it true? If so, the server generates a random number , and calculated as follows 、 、 :

[0025] Will Sent as a reply message to the mobile device MD; Step S4: After receiving the response message, the mobile device MD calculates :

[0026] Step S5: Verify the equation Is it true? If so, the mobile device MD confirms that both parties have successfully calculated the same session key ; Mobile device MD calculates hash value As a key confirmation message, it will be sent to the server;

[0027] Step S6: The server receives the message After that, verify the equation Is it true? If so, the server confirms that both parties have successfully calculated the same session key .

[0028] In this embodiment, specifically, five collision-resistant hash functions , , , , ; from Randomly select as the private key and calculate the corresponding public key .

[0029] In this embodiment, specifically, the private key generation center PKG Randomly select , and calculate as follows Long-term private key:

[0030] The security analysis of the heterogeneous authentication key agreement method provided by the present invention is as follows: Authentication: The authentication of the mobile device MD to the server is completed in step 3 of the authentication key negotiation phase. Calculate Restore the MD of the mobile device and , and then calculate The server completes the authentication of the mobile device MD in step 4 of the authentication key negotiation phase. Calculate Then calculate .

[0031] Forward secrecy: Even if the mobile device MD and the server's long-term private key and Leaked, the attacker can calculate , , and , but according to the CDH problem, the attacker still cannot calculate the session key .

[0032] Anti-temporary key leakage attack: Similar to forward security, even if the temporary key selected by the mobile device MD and the server in the session and Leaked, according to the CDH problem, the attacker still cannot calculate the session key .

[0033] Identity privacy protection: In the three rounds of interactive messages, the identity information of the communicating parties is not shown. The identity of the mobile device MD is hidden in C, and only the server can use its own private key. Restore the identity of the mobile device MD .

[0034] This embodiment also proposes a computer-readable storage medium, which stores a computer program, and when the computer program is executed by a processor, it implements the steps of an efficient heterogeneous authentication key negotiation method as described above; however, the computer-readable storage medium of the present invention is not limited to this. In this document, the readable storage medium can be any tangible medium containing or storing a program, which can be used by or in combination with an instruction execution system, apparatus or device.

[0035] The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination thereof. More specific examples of readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof.

[0036] The computer-readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, wherein the readable program code is carried. The data signal propagated may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. The readable storage medium may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, device, or component. The program code contained on the readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination thereof.

[0037] The program code for performing the operations of the present invention may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, and the like, as well as conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a stand-alone software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In cases involving a remote computing device, the remote computing device may be connected to the user computing device via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0038] The above-described embodiments merely represent specific implementation methods of the present application. While the descriptions are relatively specific and detailed, they should not be construed as limiting the scope of protection of the present application. It should be noted that a person skilled in the art would be able to make numerous variations and improvements without departing from the technical concept of the present application, and all such variations and improvements fall within the scope of protection of the present application.

[0039] This background section is provided to generally present the context of the invention, and the work of the presently named inventors, the work to the extent described in this background section, and aspects of the description in this section that did not constitute prior art at the time of filing are neither explicitly nor implicitly admitted to be prior art to the present invention.

Claims

1. An efficient heterogeneous authentication key agreement system, characterized by: include: Private key generation center PKG, certificate center CA, mobile device MD and server; Among them, the mobile device MD uses IBC; the private key generation center PKG is responsible for generating long-term private keys for the mobile device MD; The server uses PKI; the certificate authority (CA) is responsible for issuing public key certificates for the server; the mobile device (MD) and the server negotiate authentication keys.

2. An efficient heterogeneous authentication key agreement method, characterized in that: An efficient heterogeneous authentication key agreement system according to claim 1, comprising: System initialization: Select a large prime number ,definition additive cyclic group of order and the multiplicative cyclic group , select bilinear pairings , generating an additive cyclic group Generators of and the multiplicative cyclic group Generators of , and disclose system parameters ;in, are five collision-resistant hash functions, public keys , Generate the private key of the central PKG for the private key; Registration phase: The mobile device MD submits its identity to the private key generation center PKG , the private key generation center PKG generates the long-term private key of the mobile device MD , and Sent to the mobile device MD, where A random number; the server generates a private key and public key And issue a public key certificate through the certificate center CA; Authentication and key negotiation phase: Step S1: The mobile device MD generates a random number , and calculate 、 、 、 , and Sent as an initial message to the server; Step S2: Server calculation and ; Step S3: Verify the equation Is it true? If so, the server generates a random number , and calculate 、 、 ;Will Sent as a reply message to the mobile device MD; Step S4: After receiving the response message, the mobile device MD calculates ; Step S5: Verify the equation Is it true? If so, the mobile device MD confirms that both parties have successfully calculated the same session key ; Mobile device MD calculates hash value As a key confirmation message, it will be sent to the server; Step S6: The server receives the message After that, verify the equation Is it true? If so, the server confirms that both parties have successfully calculated the same session key .

3. An efficient heterogeneous authentication key agreement method according to claim 2, characterized in that: Five collision-resistant hash functions , , , , ; from Randomly select as the private key and calculate the corresponding public key .

4. An efficient heterogeneous authentication key agreement method according to claim 3, characterized in that: Private key generation center PKG from Randomly select , and calculate as follows Long-term private key: 。 5. An efficient heterogeneous authentication key agreement method according to claim 2, characterized in that: The step S1 includes: 。 6. An efficient heterogeneous authentication key agreement method according to claim 5, characterized in that: The step S2 includes: 。 7. An efficient heterogeneous authentication key agreement method according to claim 6, characterized in that: The step S3 comprises: 。 8. An efficient heterogeneous authentication key agreement method according to claim 7, characterized in that: The step S4 comprises: 。 9. An efficient heterogeneous authentication key agreement method according to claim 8, characterized in that: The step S5 comprises: 。 10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of an efficient heterogeneous authentication key agreement method as described in any one of claims 2 to 9 are implemented.

Images