- 期刊
Partitioned Group Password-based Authenticated Key Exchange with Privacy Protection
摘要
When a group Password-Based key exchange protocol is executed, the session key is typically extracted from two types of secrets: Shared keys (password) for authentication and freshly generated (nonces or timestamps) values. However, if one user (even subgroup users) runs the protocol with a non-matching password, all the others abort and no key is established. In this paper, we explore a more flexible, yet secure and privacy protection, GPAKE and put forward the notion of partitioned and privacy protection GPAKE, called PPP-GPAKE. PPP-GPAKE tolerates users that run the protocol on different passwords. Through a protocol run, any subgroup of users that indeed share a password, establish a temporary session key, and all the communication processes are user anonymity for outsiders by a temporary database helping. At the same time any two keys, each established by a different subgroup of users, are pair-wise independent if the corresponding subgroups hold different passwords. Compared with the related literatures recently, our proposed scheme can not only own high efficiency (only two communication rounds) and unique functionality, but is also robust to various attacks. Finally, we give the security proof and the comparison with the related works.
延伸閱讀
- He, D., Zhang, Y., & Chen, J. (2014). Cryptanalysis of a Three-party Password-based Authenticated Key Exchange Protocol. International Journal of Network Security, 16(5), 393-396. https://doi.org/10.6633/IJNS.201409.16(5).10
- Ruan, O., Wang, Z., Wang, Q., & Zhang, M. (2019). Continuous After-the-Fact Leakage-Resilient Group Password-Authenticated Key Exchange. International Journal of Network Security, 21(5), 861-871. https://doi.org/10.6633/IJNS.201909_21(5).19
- Lin, J. P., & Wang, R. C. (2011). Cryptanalysis of a password-based three-party Authenticated Key Exchange Protocol with a non-negligible Probability. In 中華民國資訊安全學會 (Ed.), 全國資訊安全會議 (pp. 140-145). 中華民國資訊安全學會. https://doi.org/10.29615/CISC.201105.0140
- Tsai, C. H. (2009). A Provable Server-Triggering Password-based Authenticated Key Exchange Protocol [master's thesis, National Chiao Tung University]. Airiti Library. https://doi.org/10.6842/NCTU.2009.00209
- Lin, H. Y., & Tzeng, W. G. (2009). Anonymous Password Based Authenticated Key Exchange with Sub-Linear Communication. Journal of Information Science and Engineering, 25(3), 907-920. https://doi.org/10.6688/JISE.2009.25.3.16