Design of United Identity Authentication and Key Agreement Protocol for Hybrid Cloud

Chongxia Wang; Meizhen Gao; Qian Liu; Xianwei Zhou

doi:10.3969/j.issn.1000-0801.2014.04.014

您当前的位置：

首页 >

文章列表页 >

Design of United Identity Authentication and Key Agreement Protocol for Hybrid Cloud

Research And Development | 更新时间：2024-06-05

- Design of United Identity Authentication and Key Agreement Protocol for Hybrid Cloud
- Telecommunications Science Vol. 30, Issue 4, Pages: 95-99(2014)
- 作者机构：
  
  1. 长治学院计算机系长治 046010
  2. 焦作师范高等专科学校计算机与信息工程学院焦作 454000
  3. 北京科技大学计算机与通信工程学院北京 100083
- 作者简介：
- 基金信息：
- DOI：10.3969/j.issn.1000-0801.2014.04.014
  CLC：
- Published Online：2014-04，
  
  Published：20 April 2014
- 稿件说明：
移动端阅览
Chongxia Wang, Meizhen Gao, Qian Liu, et al. Design of United Identity Authentication and Key Agreement Protocol for Hybrid Cloud[J]. Telecommunications science, 2014, 30(4): 95-99.
DOI：

Chongxia Wang, Meizhen Gao, Qian Liu, et al. Design of United Identity Authentication and Key Agreement Protocol for Hybrid Cloud[J]. Telecommunications science, 2014, 30(4): 95-99. DOI： 10.3969/j.issn.1000-0801.2014.04.014.

摘要

针对混合云中用户群不同，认证机制不一致的特点，基于双线性对和密钥协商机制，提出了一种混合云联合身份认证和密钥协商协议，实现了混合云用户身份认证和授权策略等安全信息的分布式管理与动态获取。通过理论分析和实验证明，该协议具有安全高效的特点，可以有效预防篡改数据、伪造用户身份、重放和中间人攻击等，且以较小的计算量和通信开销，为混合云联合身份认证和密钥协商提供了一种较实用的解决方案。

Abstract

Aiming at the heterogeneous users and the inconsistent authentication mechanism for hybrid clouds

a design of united identity authentication and key agreement protocol for hybrid cloud was proposed based on bilinear pairings and key agreement mechanism

which could realize the distributed management and dynamic acquisition of security information of authentication and authorization policy. The theoretical analysis and experiment results show that the proposed protocol is safe and efficient

which can effectively prevent data tampering

identity forging

replay attacks and man-in-the-middle attacks. Else the proposed protocol provides a practical solution on identity authentication and key agreement in hybrid clouds with less computation and communication overheads.

关键词

Keywords

references

周洪波著. 云计算实践指南丛书云计算：技术、应用、标准和商业模式 . 北京：电子工业出版社出版， 2010

Mell P , Grance T . The NIST Definition of Cloud Computing （Draft） . National Institute of Standards and Technology（NIST） , January 2010

沈建苗 . 2013——混合云之年 . http://www.cnw.com.cn/cloudgo2012/htm2013/20130104_262085.shtml http://www.cnw.com.cn/cloudgo2012/htm2013/20130104_262085.shtml , http://www.cnw.com.cn/cloudgo2012/htm2013/20130104_262085.shtml ， 2012

Ramgovind S , Eloff M M , Smith E . The management of security in cloud computing . Proceedings of IEEE Conference on Information Security for South Africa , South Africa , 2010

Hoover J N , Martin R . Demystifying the cloud . InformationWeek Research＆Reports , December 2009

Yan L , Rong C , Zhao G . Strengthen cloud computing security with federal identity management using hierarchical identity-based cryptography . Proceedings of the First International Conference on Cloud Computing , Beijing, China , 2009 : 167 ～ 177

Reede J . On a-select and federated identity management systems . Netherlands: University of Twente , 2007

Li H , Dai Y , Tian L , et al . Identity-based authentication for cloud computing . Lecture Notes in Computer Science , 2009 ( 5931 ): 167 ～ 177

Zhang Q K , Li Y Z , Song D J , et al . Alliance-authentication protocol in clouds computing environment . China Communications , 2012 , 9 ( 7 ): 43 ～ 54

张华，温巧燕，金正平．可证明安全算法与协议 . 北京：北京科学出版社， 2012

彭华熹．一种基于身份的多信任域认证模型 . 计算机学报， 2006 , 29 ( 8 ): 1271 ～ 1282

Kata J , Lindell Y . Introduction to modern cryptography . New York: CRC Press , 2007

罗长远，霍士伟，邢洪智．普适环境中基于身份的跨域认证方案 . 通信学报， 2011 , 32 ( 9 ): 111 ～ 117

汪定，马春光，张启明等 . 一种强口令认证方案的攻击和改进,计算机科学， 2012 , 39 ( 6 ): 72 ～ 76

Views

706

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Future vehicular fog computing networks

Key technologies and application of artificial intelligence in telecom real-name system

A novel fuzzy vault scheme based on the feature level fusion of fingerprint and face features

Mobile office system oriented to intelligent terminal

Security authentication protocol based on elliptic curve cryptography and cookie information for terminal of IoT

Related Author

Jie WU

Yiqing ZHOU

Ling LIU

Zhengang PAN

Ning HUI

Hui YAO

Siyan MA

Xun LI

Related Institution

Beijing Key Laboratory of Mobile Computing and Pervasive Device

University of Chinese Academy of Sciences

Beijing UNISOC Technologies Co.,Ltd.

Institute of Computing Technology, Chinese Academy of Sciences

Potevio Information Technology Co.,Ltd.

⁰