【摘要】 该文详细分析了TETRA系统移动台和网络之间的鉴权协议,分析表明采用共享秘密的挑战应答协议存在 若干缺陷:(1)当无法保证访问位置寄存器和归属位置寄存器之间的通信安全时会产生对已知明文攻击的开放性;(2) 网络规模较大时,在网络端难于保存和维护大量的鉴权密钥。在理论分析的基础上该文给出了一种基于身份公钥的 网络端对移动台和基于哈希链的移动台对网络端的鉴权协议,所提出的协议可以有效弥补上述缺陷。更多还原

【Abstract】 The mutual authentication between the Mobile Station(MS) and Switching and Management Infrastructure(SwMI) for TETRA is analyzed in this paper and theoretical analysis shows that some drawbacks exist when using the shared secrets in the challenge-response protocol: (1) Open attack for known text might occur once the communication security between visiting location register and home location register can not be guaranteed; (2) It is difficult to store and maintain large amount of authentication keys when the network is large. An authentication protocol for TETRA using identity-based public keys for the SwMl authenticate the MSs and an authentication protocol based on hash chain for the MSs authenticate the SwMI are presented based on the theoretical analysis, which can effectively compensate the above-mentioned drawbacks.更多还原