满足强完美前向安全性的单轮身份基和无证书认证密钥协商协议研究

One round identity-based and certificateless authenticated key agreement protocols have two advantages, one of which is they solve the certificate management burden in PKI based protocols, the other one is they do not require protocol participants are online concurrently. Now, many one round identity-based and certificateless authenticated key agreement protocols have been proposed, of which eCK-like secure protocols are better ones. Design and analysis of authenticated key agreement (AKA) protocols which simultaneously satisfy eCK-like security, one round and strong perfect forward security is one of hotspots and difficulties. We will focus on pairing-free identity-based and certificateless AKA protocols with the above three properties. The specific research contents are as follows: (1) To design provably secure pairing-free identity-based AKA protocols with the above three properties; (2) To design provably secure pairing-free certificateless AKA protocols with the above three properties; (3) To propose a generic construction of such pairing-free AKA protocols. The above contents will enrich theoretical results about identity-based and certificateless AKA protocols and lay the foundation for their further wide applications.

单轮的身份基和无证书认证密钥协商协议，一方面避免了基于PKI的协议中的证书管理负担问题，另一方面尤其适用于协议参与方不同时在线的情形。目前，许多单轮的身份基和无证书认证密钥协商协议被相继提出，其中安全性突出的是满足eCK类安全的协议。同时满足单轮、eCK类安全和强完美前向安全性的认证密钥协商协议的设计与分析是个研究热点和难点。本项目以设计无对的身份基和无证书的此类协议为研究目标，具体研究内容包括：（1）设计可证安全的无对的基于身份的此类协议；（2）设计可证安全的无对的无证书的此类协议；（3）构造满足此三种性质的无对的身份基协议（无证书协议）的一般构造方法。本项目的研究内容将能丰富身份基和无证书的认证密钥协商协议的理论，并能为身份基和无证书的认证密钥协商协议的进一步广泛应用奠定基础。

单轮的身份基和无证书认证密钥协商协议，一方面避免了基于PKI的协议中的证书管理负担问题，另一方面尤其适用于协议参与方不同时在线的情形。本项目研究满足完美前向安全性的单轮身份基和无证书认证密钥协商协议。在无双线性对的单轮基于身份的认证密钥协商协议方面，本项目设计了一个高效且eCK安全的协议，一个CDH假设下seCK安全的协议，以及一个CDH假设下eCK-PFS安全的协议；在无双线性对的单轮无证书认证密钥协商协议方面，本项目设计了一个CDH假设下seCK安全的协议和一个GDH假设下eCK-PFS安全的协议；本项目还构造了满足eCK-PFS安全的单轮身份基认证密钥协商协议的一般构造方法，以及满足完美前向安全性的单轮无证书的非对称群认证密钥协商协议。这些协议将丰富身份基和无证书的认证密钥协商协议的理论，并能为身份基和无证书的认证密钥协商协议的进一步广泛应用奠定基础。