军网身份鉴别协议设计与分析

为了适应军网上应用系统高安全性和高效率的身份鉴别要求，考虑军网身份鉴别的作用对象主要为基于用户/服务器方式的访问服务，在分析了Kerberos鉴别协议和KryptoKnight身份鉴别协议特点的基础上，设计了一种新型的基于对称密钥加密体制军网身份鉴别协议。该协议对用户透明，简化了协议交换鉴别信息的步骤，大大提高了鉴别效率。经安全分析，协议能防止窃听攻击、重放攻击和假冒攻击等常见的各种攻击行为可能造成的安全威胁。该身份鉴别协议已经应用于军网分布式身份鉴别系统中。

Design and Analysis of Authentication Protocol in Military Network

In order to ensure application system in military network to realize authentication function which call for high security and efficiency, as the authenticated object in military network are mainly access services which based on client/server mode, a new kind of authentication protocol which founded on symmetrical encryption scheme is designed by analyzing the characteristics of Kerberos protocol and KryptoKnight protocol. The new protocol is apparent to user and simplifies the procedure of authentication message exchange,thus the authentication efficiency can be improved greatly. By security analysis, the protocol can prevent from usual attacks such as wiretapping,playback,counterfeit and so on. The authentication protocol is applied in distributed authentication system of military network.