【摘要】 为了实现移动IP的商业部署,需要将认证、授权和计费(Authentication,Authorization,Accounting,AAA)引入移动IP注册过程.针对该注册过程安全与效率兼顾的问题,提出了AAA下基于无对的无证书移动IP注册协议.采用强安全高效的无对的无证书签名方案来实现外地AAA服务器与家乡AAA服务器之间的相互认证;采用消息认证码来实现家乡AAA服务器对移动节点以及移动节点对家乡代理的认证.首次采用动态更新的临时身份来代替网络服务标识中的用户信息,实现了用户匿名性.分析结果表明,该协议达到了预期的安全目标.与Cao等人提出的协议相比,该协议具有更高的安全性,注册时延减少了约20%.更多还原

【Abstract】 In order to realize the commercial deployment of the mobile IP,AAA(Authentication, Authorization,Accounting)is introduced into mobile IP registration.Aimed at the security and efficiency problems of the registration,a mobile IP registration protocol with AAA is proposed based on pairing-free certificateless public key cryptography.The mutual authentications between AAAF(AAA server in Foreign networks)and AAAH(AAA server in Home networks)are achieved by using a strongly secure and efficient certificateless signature scheme without pairings;the authentication of AAAH to MN(Mobile Node)and that of MN to HA(Home Agent)are realized via the MAC(Message Authentication Code). The user anonymity is achieved via the dynamic TID(Temporary Identity)instread of the user’s account information of the NAI(Network Access Identifier).Theoretical analyses show that the protocol reaches the expected security goals.Compared with the protocol proposed by Cao et al.,the protocol reduces the registration delay about 20% while improving the security.更多还原