对移动卫星通信系统密钥交换协议的改进

为了解决移动用户和移动卫星通信网络控制中心之间的会话密钥协商问题,对最近提出的一个通用可组合安全的移动卫星通信系统认证密钥交换协议进行了仔细分析.发现该协议的安全证明存在问题,该协议不是通用可组合安全和前向安全的,攻击者可以对协议进行数据同步攻击和密钥泄露伪装攻击.最后给出了改进方案以克服存在的安全缺陷,改进后的协议是通用可组合安全的.

Improvement of Key Exchange Protocol for Mobile Satellite Communication Systems

In order to solve the session key agreement problem between a mobile user and a network control center, an authenticated key exchange protocol for mobile satellite communication systems which was proved universally composable secure at present was carefully analyzed. It was found that there was some mistake in the proof and the protocol was easy to suffer the data synchronization attack and the key compromise impersonation attack. Furthermore, improvements to overcome the security vulnerabilities of the protocol were proposed. The improved protocol was universally composable secure.