【摘要】 本文针对无线移动网络的会话密钥分配协议SPWMN进行安全性分析,发现消息重放攻击和反射攻击对其都是有效攻击。从而指出该协议在身份认证和提供加密预言服务方面有一定的安全缺陷,然后提出一种改进的协议SPWMN-1。改进后的协议并未增加计算开销,并且修正了SPWMN的安全缺陷,比原协议更安全实用。更多还原

【Abstract】 This paper proposed a secure session-key distribution (SKD) protocol SPWMN for mobile communication in 2007, and analyzed the security of SPWMN and made it unworkable by replay attack and reflection attack. The reasons of such existing flaws were investigated as failure authentication and risky encryption oracle, and an improved protocol version (called SPWMN-1 protocol) was proposed in this paper. The SPWMN-1 protocol remedied the flaws while kept the original computation cost. The improved protocol is more secure and practical than original SPWMN protocol.更多还原