Inter-Domain Identity-based Authenticated Key Agreement Protocol from the Weil Pairing
Autor: | Hong-Bin Tsai, 蔡宏彬 |
---|---|
Rok vydání: | 2006 |
Druh dokumentu: | 學位論文 ; thesis |
Popis: | 94 An inter-domain key agreement protocol is needed while two parties in distinct domains desire to have a shared secret that is mutually agreed. A number of identity-based (ID-based) authenticated key agreement (AK) protocols using the Weil and Tate pairings have been proposed in recent years. These researches include how to make the protocols efficient, e.g., McCullagh and Barreto’s ”New Two-Party Identity-Based Authenticated Key Agreement”; how to extend AK protocol to a group, e.g., Reddy and Nalla’s ”Identity Based Authenticated Group Key Agreement Protocol”. Most of them achieve key agreement between parties inside a single domain, for example, employers of a company, staff of an organization. In other words, parties involved in communication are required to register to a common Trusted Authority (TA), which generates private keys from user’s public identity in an identity-based cryptosystem. Nowadays, a large number of communications are raised between parties in different domains, e.g., two independent companies. It is highly possible that these parties register to different TAs and thus a key agreement protocol suitable for this case is necessary. In 2003, Chen and Kudla have proposed a key agreement protocol that helps the establishment of shared secret key between parties in distinct domains. Later in 2005 McCullagh and Barreto have further proposed a new protocol to improve the efficiency of Chen and Kudla’s work. However, we found their protocols suffer from the lack of scalability and practicability. If parties involved in key agreement have registered to the same TA, they may apply identical system parameters for pairing computation. However, when parties involved in key agreement registered to distinct TAs, the possibility of applying different system parameters is not negligible. All previous works have assumed that system parameters for pairing computation are globally agreed or decided by an international standard body, which may cause vast cost of key update in real applications. Besides, following their protocols, two parties in different domains can agree on a shared secret only by applying identical system parameters. In other words, the inter-domain key agreement may fail for TAs that are inevitably equipped with different parameters, e.g., a delay of parameter update from the international standard body. In this paper, we propose an inter-domain identity-based authenticated key agreement protocol that eliminates the requirement of applying identical generator P ∈ G1 for TAs participating in key agreement protocols and achieves to establish a shared secret key between parties in distinct domains. |
Databáze: | Networked Digital Library of Theses & Dissertations |
Externí odkaz: |