MYK-NTRUSign在无线网络认证协议中的应用

56 浏览量更新于2024-08-30 收藏 1018KB PDF 举报

"该文提出了一种在无线网络环境中基于MYK-NTRUSign签名算法的双向认证和密钥协商协议。此协议采用AES加密算法和哈希技术，旨在实现双方的相互认证和会话密钥协商。由于利用了MYK-NTRUSign签名算法，该协议不仅能克服基于秘密钥的认证协议的安全缺陷，而且相比已知的公钥无线认证方案，具有更高的安全属性和更低的计算复杂性。" 本文的研究重点是无线网络环境中的安全通信，特别是针对认证和密钥协商过程。MYK-NTRUSign签名算法是其中的核心，它是一种结合了NTRU（Number Theory Research Unit）公钥密码体制和特定密钥结构（MYK，即Modified Yale Key）的签名算法。NTRU算法以其快速的运算速度和对量子计算的抵抗能力而知名，而MYK的引入可能是为了进一步优化性能或解决NTRU的一些特定问题。在无线网络环境中，由于网络的开放性和不稳定性，安全通信尤其重要。传统的基于秘密钥的认证协议可能存在密钥管理和安全性不足的问题，例如，如果密钥被泄露，整个系统可能会遭受攻击。而公钥认证方案虽然提供了更好的安全性，但计算复杂度较高，不适合资源有限的无线设备。论文中提出的双向认证协议分为两个阶段：初始阶段和相互认证与密钥协商阶段。初始阶段可能涉及设备身份验证和预共享信息的设置，以确保通信双方的合法性。在相互认证与密钥协商阶段，利用MYK-NTRUSign算法生成的数字签名可以验证消息的完整性和发送者的身份，同时通过AES加密算法保证数据的机密性。哈希函数则用于防止重放攻击和提供额外的消息完整性保护。通过对比分析，该协议在保持安全性的前提下，降低了计算复杂度，这使得它更适用于资源受限的无线设备，如物联网(IoT)设备或移动终端。此外，这种协议的双向认证特性可以防止中间人攻击和伪装攻击，增加了无线网络环境中的通信安全性。总结来说，这篇研究论文探讨了一种新颖的无线网络环境认证协议，利用MYK-NTRUSign签名算法提升了安全性和效率，为无线网络环境中的安全通信提供了新的解决方案。

Authentication Protocol using MYK-NTRUSign

Signature Algorithm in Wireless Network

Environment

Aihan Yin

School of Information Engineering, East China Jiaotong University, Nanchang 330013, China

Email: yinaihan@126.com

Hongchao Liang, and Ming Zhu

School of Information Engineering, East China Jiaotong University, Nanchang 330013, China

Email: {mr_lianghc, zhuming061104269}@163.com

Abstract—In this paper, we propose a new bidirectional

authentication and key agreement protocol based on the

MYK-NTRUSign signature algorithm. The AES encryption

algorithm and hash techniques were adopted to build our

protocol. To implement the mutual authentication and

session key agreement, the proposed protocol includes two

phases: namely initial phase and mutual authentication with

key agreement phase. As the MYK-NTRUSign signature

algorithm is applied, our protocol not only can overcome the

security flaws of authentication protocols based on

secret-key, but also support greater security attributes and

lower computational complexity in comparison with

currently well-known public key based wireless

authentication schemes.

Index Terms—MYK-NTRUSign Signature Algorithm; AES

Encryption; Key Agreement; Bidirectional Authentication

I. INTRODUCTION

Wireless communications is advancing rapidly in

recent years. After 2G (e.g. GSM) widely deployed in the

world, 3G mobile communication systems are spreading

step by step in many areas. At present, some countries

have already launched investigations beyond 3G (B3G)

and 4G. Due to the openness of the wireless

communication network, sharing of communication

channels, network protocol security, the diversity of

network attack means of incomplete, there is a huge

security threat, which make the wireless communication

security problem more and more attention.

To solve the security problems, cellular networks such

as GSM and UMTS all employ the symmetric key

algorithms (e.g. A5 and Kasumi) to implement the

authentication and the session keys agreement before the

subscriber is authorized to access the network. Because of

wireless LAN (WLAN), the WEP (Wired Equivalent

Privacy) protocol based on symmetric key algorithm RC4

is specified. However, some authentication mechanisms

based on symmetric cryptosystem for wireless access

control are adopted in consideration of the performance,

the security flaws are obvious. For instance, the

International Mobile Subscriber Identity (IMSI) used in

cellular networks may be transmitted in plaintext during

the authentication. It leads to a passive attacker in a

position to eavesdrop the user's identity and locate the

user easily. In addition, the shared secret key's

management and maintenance will result in scalability

problem when users increase in number [1].

Some public key based authentication protocols

specifically designed for wireless networks have been

proposed in recent years to overcome the security flaws

mentioned above. Among them, the well-known

authentication and key agreement protocol appropriate

for wireless networks on the basis of elliptic-curve

cryptography techniques was ASK-WAP [2]

and UAP[3].

Even though the protocol reduces to some extent

computational complexity on the user side by using

elliptic curve cryptography (ECC) algorithm, the server

just verify the user’s identity legitimacy and the server is

not authenticated to the user. So it does not really achieve

the bidirectional authentication.

NTRU (Number Theory Research Unit) public key

cryptosystem is a kind of very promising public key

cryptography scheme. The attractive advantages of

NTRU are its encryption/decryption speed,

signature/verification speed and the ease of creating

public-private key pairs while providing high security

level [4]-[7]. NTRU as a new public cryptosystem was

first presented by Hoffstein [8]-[11]. It is a ring-based

cryptosystem operating in polynomial ring Z[X]/(xN-1)

where N is the security parameter. Then, researchers have

proposed the NSS, R-NSS and NTRUSign algorithm

[12]-[15]. However, NSS and R-NSS algorithm has been

breached. In NTRUSign algorithm, Signers use the

private key to generate plaintext closest vectors, the

vectors are NTRU lattice, and the vector as plaintext

signature. Min et al. [16] proposed a NTRUSign

algorithm of ductility attack methods: an attacker by

active eavesdropping, after receiving a message with the

signature of the legal cases, able to forge a multiple legal

signature of the message; At the same time give a repair

JOURNAL OF NETWORKS, VOL. 9, NO. 5, MAY 2014

1139

doi:10.4304/jnw.9.5.1139-1144

下载后可阅读完整内容，剩余5页未读，立即下载

weixin_38656989

粉丝: 3
资源: 934

MYK-NTRUSign在无线网络认证协议中的应用

基于K-means聚类算法的图像分割及其MATLAB实现

k-means算法实例

博客中聚类算法（K-means、FCM、DBSCAN、DPC）的数据集（免积分）

K-means与K-medoids聚类算法的MATLAB实现

k-means聚类算法实战案例分析

Python实现K-means聚类算法详解及应用

MATLAB实现K-prototype聚类算法详解及代码

改进的k-means聚类算法研究与应用

"K-means聚类算法详解PPT：算法原理、流程、实例、应用、总结

深入分析与改进K-means聚类算法的MATLAB实现及仿真研究

最新资源