CAJ | 학술논문

认证双方数据的同步是认证协议以及认证密钥交换协议的基本要求,但是在协议设计过程中难以把握且经常被忽视.对近年来可证明安全的一个RFID认证协议和一个RFID认证密钥交换协议以及可证明安全的一个移动卫星通信系统认证密钥交换协议进行了仔细分析,分别发现了针对这些协议的数据同步攻击,这些攻击破坏了协议的可用性.最后分别给出了改进方案,以克服存在的安全隐患.
인증쌍방수거적동보시인증협의이급인증밀약교환협의적기본요구,단시재협의설계과정중난이파악차경상피홀시.대근년래가증명안전적일개RFID인증협의화일개RFID인증밀약교환협의이급가증명안전적일개이동위성통신계통인증밀약교환협의진행료자세분석,분별발현료침대저사협의적수거동보공격,저사공격파배료협의적가용성.최후분별급출료개진방안,이극복존재적안전은환.
Data synchronization is a basic requirement for authentication protocols and authenticated key exchange protocols,but it is much trickier and many times overlooked.By carefully analyzing an RFID authentication protocol,an RFID anthenticated key exchange protocol,and an authenticated key exchange protocol for mobile satellite communication systems which were found to be provably secure at present,attacks of data synchronization to these protocols were found respectively.These attacks destroy the availability of protocols.Furthermore,improvements to overcome the security vulnerabilities of these protocols were proposed.