标准模型下隐私保护的多因素密钥交换协议

多因素认证密钥交换协议融合多种不同的认证因素来实现强安全的身份认证和访问控制,在具有高级别安全应用需求的移动泛在服务中具有巨大的应用潜力.现阶段多因素协议的研究成果还不丰富,并且已有协议都是在随机预言模型下可证明安全的.以两方口令认证密钥交换协议、鲁棒的模糊提取器以及签名方案为基本组件提出了一个标准模型下可证明安全的多因素协议.本文的协议中服务器不知道用户的生物模板，因此实现了对生物信息的隐私保护.与已有的随机预言模型下的多因素协议相比,本文的协议在满足更高安全性的同时具有更高的计算效率和通信效率,因此更满足高级别安全的移动泛在服务的应用需求.

Privacy-Preserving Multi-Factor Key Exchange Protocol in the Standard Model

Multi-factor authenticated key exchange (MFAKE) protocols combine different authentication factors to realize strongly secure identity authentication and access control, and have great application potential in mobile ubiquitous services with high-level security requirements. Until now, literature about MFAKE protocols is rare and far from satisfactory. Moreover, existing multi-factor authenticated key exchange protocols are all proven secure in the random oracle model. We propose an MFAKE protocol using two-party password authenticated key exchange protocols, fuzzy extractors and signature schemes as building blocks. The security of the proposed MFAKE protocol is conducted in the standard model. The server does not need to know the biometric template of the user, thus the biometric privacy of the user is preserved. Compared with existing MFAKE protocols, our protocol achieves stronger security with lower computation and communication costs. Consequently, our protocol is more suitable for mobile ubiquitous services with high-level security requirements.