CAJ | 학술논문

本文针对建立在对等方式下的融合网络提出了一种新的认证和密钥更新算法.认证包括三个方面:非漫游状态下的完整认证、漫游状态下的完整认证以及切换状态下的快速认证.密钥更新包括两个方面:非漫游状态下的密钥更新和漫游状态下的密钥更新.在算法中,通过引入认证中心,不仅实现了网络对用户身份的认证,而且实现了节点对网络身份的认证,由此保证了双方身份的合法性;同时为了实现切换的无缝性,采用节点对认证数据包进行中继转发的方式,减少了切换时的认证时间.性能分析表明,该算法能够有效地抵御常见攻击.
본문침대건립재대등방식하적융합망락제출료일충신적인증화밀약경신산법.인증포괄삼개방면:비만유상태하적완정인증、만유상태하적완정인증이급절환상태하적쾌속인증.밀약경신포괄량개방면:비만유상태하적밀약경신화만유상태하적밀약경신.재산법중,통과인입인증중심,불부실현료망락대용호신빈적인증,이차실현료절점대망락신빈적인증,유차보증료쌍방신빈적합법성;동시위료실현절환적무봉성,채용절점대인증수거포진행중계전발적방식,감소료절환시적인증시간.성능분석표명,해산법능구유효지저어상견공격.
This paper proposes an authentication and key-update algorithm for heterogeneous wireless networks which are based on the peer to peer network architecture. The authentication includes three aspects: the full authentication in the state of non-roaming, the full authentication in the state of roaming, and the local fast authentication in the state of handoff. The key-update includes two aspects: the update in the state of non-roaming and the update in the state of roaming. A certification authority is introduced, and thus not only a node could authenticate a new network, but also a new network could authenticate a node. In order to reduce the authentication time during handoff, the algorithm makes nodes relay the authentication packets between two networks. The analyses of the authentication protocol from some aspects show that the algorithm could defense the common attacks effectively.