3자간 안전한 인증된 키 동의 프로토콜

다국어 초록 (Multilingual Abstract)

Recently, a password-based tripartite authenticated key exchange protocol using hash function and XOR operation as its main operations was proposed to support secure communication to the two users registered in the same server. But the protocol is vulnerable to the active attack of malicious server. This paper proposes a new tripartite authenticated key agreement protocol improving the protocol. The proposed protocol is not only safe from the active attack of malicious server, but also safe from password guessing attack by the using of verifiers derived from the passwords. In addition, it is safe from the server compromise attack because the server cannot know the shared session key between the two users.

목차 (Table of Contents)

• Abstract
• Ⅰ. 서론
• Ⅱ. 선행 연구
• Ⅲ. 제안한 키 동의 프로토콜
• Ⅳ. 성능 평가
• Ⅴ. 결론
• 참고문헌

참고문헌 (Reference)

1 전일수, "일방향 함수를 이용한 효율적인 3자 참여 인증된 키 교환 프로토콜" 한국인터넷전자상거래학회 8 (8): 127-138, 2008

2 Y. Ding, "Undetectable on-line password guessing attacks" 29 (29): 77-86, 1995

3 C. Lin, "Three-party encrypted key exchange: Attacks and a solution" 34 (34): 12-20, 2000

4 C. Lin, "Three-party Encrypted Key Exchange Without Server Public-Keys" 5 (5): 497-499, 2001

5 H. Sun, "Secure key agreement protocols for three-party against guessing attacks" 75 : 63-68, 2005

6 T. Kwon, "Secure agreement scheme for gxy via password authentication" 35 (35): 892-893, 1999

7 M. Steiner, "Refinement and extension of Encrypted Key Exchange" 29 (29): 22-30, 1995

8 W. Diffie, "New directions in cryptography" 22 (22): 644-654, 1976

9 S. M. Bellovin, "Encrypted key exchange: Password-based protocols secure against dictionary attacks" 72-84, 1992

10 S. W. Lee, "Efficient verifier-based key agreement protocol for three parties without server’s public key" 167 (167): 996-1003, 2005

11 S. M. Bellovin, "Augmented encrypted key exchange : a password-based protocol secure against dictionary attacks and password file compromise" AT&T Bell Laboratories 1994