適用於高維度圖形的群體通行碼認證金鑰協定之設計

Password-Based Group Key Agreement with Server's Public Key for Hypergraphs

李添福(Tian-Fu Lee) ； 溫翔安(Xiang-An Wen) ； 金永昌(Yong-Chang Jin) ； 陳采諠(Cai-Syuan Chen)

《2008資通技術管理與應用會議》 2008 (2008/12) Pp. 226-238

https://doi.org/10.29649/ZTJSGL.200812.0226

摘要

通行碼認證(Password-based authentication)之通訊協定，指使用者在網路通訊中，只需要記憶一組容易記憶的密碼，毋需透過其他硬體協助去儲存秘密金鑰(secret key)，便可與他人產生一會議金鑰。藉此金鑰，使用者便可與他人在公開的網路上安全通訊。在2006年，Abdalla等人提出一有效率的群體通行碼認證金鑰協定(PGAKE)。然而，對於實際的環境，一個使用者往往同時隸屬於多個不同的群組，Abdalla等人所提之PGAKE協定僅侷限於單一群組的使用，難以延伸到多個群組。因此，本研究將利用PGAKE協定中製作群體認證金鑰的方法，並利用server的公開金鑰，再導入高維度圖形(Hyper-graph)的概念，設計一適用於高維度圖形之群體通行碼認證金鑰協定，即隸屬於多個不同的群組的使用者，可同時造出隸屬於各群組的會議金鑰。

關鍵字

高維度圖形 ； 網路通訊協定 ； 群體認證金鑰協定 ； 網路安全

並列摘要

In the password-based authentication protocol, users memorize their easy-to-remember passwords without needing any hardware to store the secret keys and construct a common session key. Using this session key, users are able to securely communicate each other in public networks. In 2006, Abdalla et al. proposed a password-based group key exchange protocol (PGKE). The protocol proposed by Abdalla et al. employed the password to encrypt information and construct a common group key in a constant number of rounds. However, the PGKE protocol proposed by Abdalla et al. is only suitable used for one group, and is difficult to expand to multiple groups since one user may belong to many different groups in the real world. Therefore, based on the PGKE protocol, this paper will propose an improved password-based authentication group key agreement protocol with server's public key suitable for hypergraphs. Namely, the proposed group key agreement protocol not only simultaneously constructs many group keys for different groups, but also has AKE security, data integrity, mutual authentication and resisting password-guessing attacks.

並列關鍵字

Hypergraphs ； authentication protocol ； network security ； group key agreement