计算机应用 ›› 2011, Vol. 31 ›› Issue (11): 2954-2956.DOI: 10.3724/SP.J.1087.2011.02954

• 信息安全 • 上一篇    下一篇

基于身份的无线传输层安全握手协议改进方案

谌双双,陈泽茂,王浩   

  1. 海军工程大学 电子工程学院, 武汉 430033
  • 收稿日期:2011-05-23 修回日期:2011-07-08 发布日期:2011-11-16 出版日期:2011-11-01
  • 通讯作者: 王浩
  • 作者简介:谌双双(1986-),男,湖南益阳人,硕士研究生,主要研究方向:网络安全;
    陈泽茂(1975-),男,福建福清人,副教授,博士,主要研究方向:信息与网络安全;
    王浩(1988-),男,安徽池州人,硕士研究生,主要研究方向:系统安全。
  • 基金资助:
    国家863计划项目

Identity-based improvement of wireless transport layer security handshake protocol

CHEN Shuang-shuang,CHEN Ze-mao,WANG Hao   

  1. College of Electronic Engineering, Naval University of Engineering, Wuhan Hubei 430033, China
  • Received:2011-05-23 Revised:2011-07-08 Online:2011-11-16 Published:2011-11-01
  • Contact: WANG Hao

摘要: 现有无线传输层安全(WTLS)协议主要基于数字证书构建,存在通信与计算开销较大、未对服务器证书的有效性进行在线验证等不足。以基于身份的密码体制思想,综合运用基于身份的加密(IBE)、基于身份的签名(IBS)及基于身份的密钥协商(IBAKA)等机制,提出了一种基于身份的密码系统(IBC)的WTLS改进协议。改进协议以身份标识为核心,以传递身份标识代替传递证书,使用IBE、IBS及IBAKA分别完成加密、签名及密钥协商等操作,并在密钥计算中融入了加密者的身份信息,使得密文具有消息源的可认证性。对改进协议的安全性及效率的分析表明,改进协议在确保安全的前提下降低了通信开销。

关键词: 无线传输层安全, 基于身份的密码系统, 身份认证, 密钥协商, 握手协议

Abstract: The Wireless Transport Layer Security (WTLS) handshake protocol was built based on digital certificate mechanism. However, there exist several flaws in WTLS. For example, both the communication and computation overload are high. Moreover, it does not verify the server certificate on-line. In order to solve these issues, an improved WTLS handshake protocol based on Identity-based Cryptosystem (IBC) was proposed. It is constructed based on ID, and IDs are exchanged between server and client instead of certificates. Identity-based Encryption (IBE), Identity-based Signature (IBS) and Identity-based Authenticated Key Agreement (IBAKA) were adopted to implement security functions of encryption, signature and key agreement respectively. Sender's ID information was embedded into encryption key computation, which can be used to authenticate the source of message. The analysis on security and efficiency shows that the efficiency of wireless communication is improved without security loss.

Key words: Wireless Transport Layer Security (WTLS), Identity-Based Cryptosystem (IBC), identity authentication, key agreement, handshake protocol