基于公钥的可证明安全的异构无线网络认证方案

该文针对3G-WLAN异构网络的接入安全，对异构网络的实体进行抽象，建立了一种通用的认证模型。在该模型的基础上，利用Canetti-Krawczyk (CK)模型设计了一种新的接入认证与密钥协商方案。该方案利用公钥基础设施分配公钥，简化接入端服务器和归属端服务器间的认证过程和认证信息；利用椭圆曲线密码机制，减少了移动终端的认证计算量；最后利用CK模型对提出的协议进行了形式化分析和证明。分析表明该方案是安全有效的。

Provable Security Authentication Scheme Based on Public Key for Heterogeneous Wireless Network

Aiming at access security aspect of 3G-WLAN heterogeneous wireless network, this paper abstracts each entities of heterogeneous wireless network, thereby establishes a general authentication model. Then based on this general authentication model, a novel access authentication and key agreement scheme by using Canetti-Krawczyk (CK) model is devised. This scheme simplifies the authentication process and information between access network server and home network server by using Public Key Infrastructure (PKI) to distribute public key. It also decreases the authentication computational complexity of mobile terminal by Elliptic Curves Cryptography (ECC). Finally, formal analysis and proof with CK model for the proposed protocol are given. It is showed that the proposed scheme is secure and efficient.