【作者】 刘佳；

【导师】 王建东；

【作者基本信息】 南京航空航天大学 ， 计算机应用技术， 2013， 博士

【摘要】 论文对普适计算环境中的认证协议进行研究和设计。在基于普适计算环境进行的各种各样的应用中，信任的建立是第一前提，只有在相互信任的基础上，设备之间才可能通过各种方法来协同工作，并为用户提供服务。由于普适计算环境具有的移动性、分布性、开放性、动态性、不确定性等特征，使得传统的认证技术不适宜直接应用在普适计算环境中。一般的，我们可以通过直接信任和间接信任两种方式来建立信任关系，间接信任通过推荐的方式完成，而直接信任则主要通过各种认证技术的应用来完成。围绕着传统的认证协议，论文分别从分布式认证、门限认证、属性认证、匿名认证和双向认证等不同角度对认证协议进行了设计和改进，使得其更加适合于普适计算的应用环境，论文的主要研究工作如下：（1）在普适计算环境中，建立了无需可信第三方参与的分布式认证模型。将传统的基于身份的密码体制的认证协议拓展为分布式认证协议，整个协议的执行无需可信第三方的参与，从系统密钥的分配阶段，到用户密钥的产生，再到认证交互过程，都由分布的多个认证方节点来协同完成，使得每个认证节点都具有较小的运算量与通信量。同时结合矢量空间门限构造方法，进行了门限分布式认证协议构造，使得认证系统具有了一定的冗余性和容错性，并且对该协议进行了形式化证明，证明了协议是IND-ID-CPA安全的。（2）在矢量空间秘密共享基础上，设计并提出了普适计算环境中一种基于背景感知的认证协议。研究了普适计算环境下背景感知身份认证，通过分析将用户背景与用户属性进行了有机融合，通过合理的访问结构设置，在矢量空间门限方案的基础上，结合基于属性的密码体制，构造了基于属性的门限认证协议。协议具有分布式运算的特征，认证步骤由多个认证节点协同运算，保持了其小运算量和通信量的优点，同时协议基于用户属性完成对用户身份的认证，非常适合于普适计算环境。（3）提出了普适计算环境中面向群的匿名认证协议。对普适计算环境中的匿名认证技术进行了研究。匿名认证的匿名性可以分为两个层次，一是对于被认证方身份的匿名性保护，即通过某种方法在不暴露被认证方完整身份的前提下达成对其的信任，基于属性的认证协议自身就具备了这种匿名性，另一种匿名性则是对于属性认证中的部分属性进行匿名性保护，这实际上是一种群的匿名性保护，本文针对这种应用，在标准ABE的基础上，结合拉格朗日插值多项式门限构造方法，进行了这种群匿名性的构造，并且对其正确性和匿名性都进行了数学推导和证明，最后通过实验对其进行了分析和验证。（4）提出了基于签密技术的分布式门限双向认证协议。签密的核心即签密运算的构造中，入口参数同时包含了对方公钥和自己的私钥，所以使得其一次运算可以完成类似签名+加密的效果。本文针对这一特点分别在Zheng的签密体制和ABE体制下，完成了基于签密的双向认证协议构造，该双向协议的执行代价近似于单向认证协议，我们通过实验对此进行了验证。同时协议同样具有分布式运算特征和门限特征，非常适合于普适计算应用环境。更多还原

【Abstract】 The establishment of trust is the first prerequisite for all kinds of applications based on thepervasive computing environment, because it is on the basis of mutual trust that devices can cooperatewith one another through various ways to provide service for users. We generally can build trustrelationship by such two ways as direct trust and indirect trust, and indirect trust is completed byrecommendation while direct trust mainly by application of all sorts of authentication technologies.Pervasive computing environment has the characteristics of mobility, distributivity, openness,dynamism and uncertainty and so on, which makes the traditional authentication technology notsuitable for being directly applied in the pervasive computing environment, so this paper aims tostudy the authentication technology in the pervasive computing environment and the major researchworks are as follows:(1) Distributed authentication model without key distribute center (KDC) involved is created inthe pervasive computing environment. The traditional authentication protocol of identity-basedencryption (IBE) system is developed into distributed authentication protocol, without KDCparticipated in its implementation and the distributed junctions of various authentications coordinatewith one another to complete from the distribution phase of the system’s key to the generation of theuser’s key and then to the authentication interactive process, making every authentication junction getrelatively smaller operation and traffic. Meanwhile the threshold distributed authentication protocol iscreated with the construction method of vector space threshold for reference, so that the authenticationsystem has the features of redundancy and fault tolerance and moreover the formal verification of thisprotocol proves its security in IND-ID-CPA.(2) The thesis studies the identity authentication of context dependent in the pervasive computingenvironment, integrates users’ background with their attributes in an organic way through analysis,and establishes attribute-based threshold authentication protocol with the combination ofattribute-based encryption (ABE) system through appropriate setting of access structure, on the basisof vector space threshold project. The protocol still has the feature of distributed operation, and itsauthentication procedures are completed by various authentication junctions, keeping its advantagesof small operation and traffic and also the identity authentication completed by the protocol based onusers’ attribute is very suitable for the pervasive computing environment.(3) The thesis analyzes the anonymous authentication technology in the pervasive computing environment. Anonymity of anonymous authentication is divided into two levels: the one isanonymous protection for the identity of the authenticated party, namely, having trust to theauthenticated party in a way which will not expose its complete identity and thus the attribute-basedauthentication protocol will possess such anonymity; the other one is anonymous protection for partattributes of attribute authentication, which is actually anonymous protection for group and for suchapplication, this paper is intended to construct this group anonymity with the combination ofconstruction method of Lagrange interpolation polynomial threshold on the basis of standard ABE andto carry out mathematical derivation and demonstration for its correctness and anonymity, whichfinally is analyzed and verified by the experiment.(4) The construction of two-way authentication protocol of signcryption-based distributedthreshold is completed. Entry parameter consists of the public key and private key in the constructionof signcryption operation-the core of signcryption; therefore similar effects as signature andencryption can be together completed in an operation. Two-way signcryption-based authenticationprotocol is completed in the (Zheng) signcryption and ABE system in this paper and it is verified bythe experiment that the price for implementing this two-way protocol is similar to that of one-wayauthentication protocol. Also this protocol of distributed operation and threshold characteristics isvery suitable for the pervasive computing environment.更多还原