一种改进的跨域口令密钥交换协议.pdf

文档介绍：2 2 2 2
f Information Science & Engineering , Northeastern University , Shenyang 110004 , China.
Correspondent : ZHOU Fu cai , E mail : fczhou @ mail. neu. edu. cn)
Abstract : The client to client password authenticated key exchange ( C2C PA KE) protocol
enables two clients from different realms to agree on a shared common session key. Describing the
C2C PA KE protocol of Byun2007 , its security is analyzed and it is found that the protocol is easy
to suffer the attacks due to password compromised impersonation and undetected on line
dictionary. An improved C2C PA KE protocol is therefore proposed to introduce the public key
mechanism into system security to resist those attacks effectively , especially only six operational
steps are needed in relevant communication. As shown in security analysis ,the protocol proposed
is available to meet the security requirements.
Key words : security agreement ; cross realm ; password authenticated key exchange ; password
compromise impersonation attack ; adversary
随着网络的发展 ,移动网络、家庭网络等也得 2004 年 Kim 等学者[3 ] 又指出该协议不能抵御
[4 ]
到了飞速发展·在无处不在的网络中 ,端到端的安