Abstract:

ECMQV is an authenticated key exchange scheme based on conventional ECDH protocol,it possesses advantages on higher security and lower computation overhead. This paper implemented a WTLS protocol variant through the integration of ECMQV scheme into WTLS framework; the security of current WTLS protocol was greatly enhanced while only a little more computation overhead was incurred. The WTLS protocol variant can be deployed on lightweight wireless terminals and meet their high-security requirements under future enterprise remote access environments.

Key words: network security, WTLS, authenticated key exchange protocol, ECMQV

摘要：

ECMQV协议是一种基于ECDH的认证和密钥交换方案,它具有高安全性和低计算开销 等优点。通过将ECMQV协议集成到WTLS协议框架中实现了一种WTLS扩展协议,它在略微增加 无线终端计算开销情况下明显提高现有WTLS协议安全性。在协议中采用了Cookie技术来防止可 能的拒绝服务攻击。该WTLS扩展协议可在轻量级无线终端上实现,以满足无线终端在企业远程访 问环境下的高安全性要求。

关键词: 网络安全, WTLS, 密钥交换方案, ECMQV