authenticated key exchange with entities from different settings and varied groups

ISCAS OpenIR

	authenticated key exchange with entities from different settings and varied groups
	Guo Yanfei; Zhang Zhenfeng
	2012
会议名称	6th International Conference on Provable Security, ProvSec 2012
会议录名称	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
页码	276-287
会议日期	September 26, 2012 - September 28, 2012
会议地点	Chengdu, China
收录类别	EI
ISSN	0302-9743
ISBN	9783642332715
部门归属	(1) SKLOIS Institute of Information Engineering Chinese Academy of Sciences China; (2) Institute of Software Chinese Academy of Sciences China
摘要	Authenticated key exchange (AKE) protocol is one of the most widely used cryptographic primitives, and lots of protocols have been proposed either in the certificate-based (cert-based) setting or in the identity-based (id-based) setting. In practical applications, entities from different settings may have the requirement to communicate with each other. Though there are works concentrated on supporting either multiple certification authorities (CAs) or multiple key generation centers (KGCs), very few papers have focused on the interoperability between the two settings. Furthermore, existing approaches are still inadequate in supporting parameters from different algebraic groups introduced by multiple CAs and multiple KGCs. In this paper, we focus on AKE protocols integrating cert-based settings and id-based settings with varied groups, and propose an AKE protocol where one entity is cert-based and the other is id-based, and the parameters of both entities may come from different groups. An extended AKE security model of [6,22] is proposed to support multiple KGCs and CAs. The proposed protocol is proved to be secure in the extended security model. Finally, we extend the protocol to achieve forward secrecy and resistance to leakage of both ephemeral keys. © 2012 Springer-Verlag.; Authenticated key exchange (AKE) protocol is one of the most widely used cryptographic primitives, and lots of protocols have been proposed either in the certificate-based (cert-based) setting or in the identity-based (id-based) setting. In practical applications, entities from different settings may have the requirement to communicate with each other. Though there are works concentrated on supporting either multiple certification authorities (CAs) or multiple key generation centers (KGCs), very few papers have focused on the interoperability between the two settings. Furthermore, existing approaches are still inadequate in supporting parameters from different algebraic groups introduced by multiple CAs and multiple KGCs. In this paper, we focus on AKE protocols integrating cert-based settings and id-based settings with varied groups, and propose an AKE protocol where one entity is cert-based and the other is id-based, and the parameters of both entities may come from different groups. An extended AKE security model of [6,22] is proposed to support multiple KGCs and CAs. The proposed protocol is proved to be secure in the extended security model. Finally, we extend the protocol to achieve forward secrecy and resistance to leakage of both ephemeral keys. © 2012 Springer-Verlag.
主办者	University of Electronic Science and Technology of China (UESTC)
语种	英语
内容类型	会议论文
URI标识	http://ir.iscas.ac.cn/handle/311060/15790
专题	中国科学院软件研究所
推荐引用方式 GB/T 7714	Guo Yanfei,Zhang Zhenfeng. authenticated key exchange with entities from different settings and varied groups[C],2012:276-287.