CAJ | 학술논문

针对大规模延迟容忍网络中现有认证方案存在通信与计算开销大问题，该文提出适用于大规模延迟容忍网络的高效认证方案。首先设计一种分级身份签名算法，在现有同类算法中计算和通信开销最小，并且具有聚合验签功能。基于该算法设计双向认证方案，并利用聚合验签功能实现并发认证，降低认证开销。基于 h-wDBDHI*与ECDDH难题证明了签名算法及方案的安全性。分析与仿真实验表明，该方案的认证开销及认证成功率优于现有方案，更适合在大规模延迟容忍网络中应用。
침대대규모연지용인망락중현유인증방안존재통신여계산개소대문제，해문제출괄용우대규모연지용인망락적고효인증방안。수선설계일충분급신빈첨명산법，재현유동류산법중계산화통신개소최소，병차구유취합험첨공능。기우해산법설계쌍향인증방안，병이용취합험첨공능실현병발인증，강저인증개소。기우 h-wDBDHI*여ECDDH난제증명료첨명산법급방안적안전성。분석여방진실험표명，해방안적인증개소급인증성공솔우우현유방안，경괄합재대규모연지용인망락중응용。
The existing authentication schemes have the problem of heave calculation and communication overhead in the large-scale delay tolerant network. This paper proposes an authentication scheme for large-scale delay tolerant networks. An efficient hierarchical identity based signature is proposed, which has less overhead compared with the existing schemes and has the aggregate verification property. Based on the proposed signature, an authentication scheme is constructed. A batch authentication is also proposed based on the aggregate verification properties of the signature. The signature and scheme prove to be secure under the h-wDBDHI* and ECDDH assumption. The analysis and simulation show that the authentication overhead and successful rate of this scheme are both better than the existing schemes. The scheme is more suitable for the large-scale delay tolerant networks.