CAJ | 학술논문

针对IKEv2协议在系统开销和发起方身份保护方面的不足,提出了一种改进协议的方案.新的协议采用基于超椭圆曲线的Weil对技术进行数字签名认证,并且首先认证响应方身份.通过该方案,改进后的协议降低了系统开销,实现了对发起方身份的主动保护.最后,基于应用pi演算的方法对协议进行了建模,并定义和分析了协议的安全属性.结果表明,改进后的协议具有更好的安全性和实用性.
침대IKEv2협의재계통개소화발기방신빈보호방면적불족,제출료일충개진협의적방안.신적협의채용기우초타원곡선적Weil대기술진행수자첨명인증,병차수선인증향응방신빈.통과해방안,개진후적협의강저료계통개소,실현료대발기방신빈적주동보호.최후,기우응용pi연산적방법대협의진행료건모,병정의화분석료협의적안전속성.결과표명,개진후적협의구유경호적안전성화실용성.
IKEv2 protocol had some flaw in protecting initiator's identity and system requirement,so this paper presented an improved protocol.In the new protocol,used Weil pairing technology,based on hyperelliptic curves,in digital signature authentication,and first authenticated the responder.By those means,the protocol had reduced the system cost and actively protected the initiator's identity.At last,formally analyzed the improved protocol's security property based on applied pi calculus.Analysis result shows that the protocol has a better performance in secure and application.