Extended Internet Key Exchange Protocol Version 2 in Trusted Computing Environment

XIAO Yue-lei; WU Jun-sheng; ZHU Zhi-xiang

Chinese

您当前的位置：

首页 >

文章列表页 >

Extended Internet Key Exchange Protocol Version 2 in Trusted Computing Environment

更新时间：2026-09-04

- Extended Internet Key Exchange Protocol Version 2 in Trusted Computing Environment
- Vol. 35, Issue 12, Pages: 1-7(2018)
- 作者机构：
  
  1. 西北工业大学计算机学院,陕西,西安,710072
  2. 陕西省信息化工程研究院,陕西,西安,710075
  3. 西安邮电大学机构物联网与两化融合研究院,陕西,西安,710061
- 作者简介：
- 基金信息：
- DOI：
  CLC：
- Published：2018
- 稿件说明：
移动端阅览
肖跃雷, 武君胜, 朱志祥. 可信计算环境下的IKEv2协议扩展方案[J]. 微电子学与计算机, 2018, 35(12): 1-7.

XIAO Yue-lei, WU Jun-sheng, ZHU Zhi-xiang. Extended Internet Key Exchange Protocol Version 2 in Trusted Computing Environment[J]. 2018, 35(12): 1-7.
肖跃雷, 武君胜, 朱志祥. 可信计算环境下的IKEv2协议扩展方案[J]. 微电子学与计算机, 2018, 35(12): 1-7. DOI：

XIAO Yue-lei, WU Jun-sheng, ZHU Zhi-xiang. Extended Internet Key Exchange Protocol Version 2 in Trusted Computing Environment[J]. 2018, 35(12): 1-7. DOI：

摘要

在IKEv2协议基础上

利用ISO/IEC 9798-3:1998/Amd 1:2010中的认证机制

提出了一种可信计算环境下的IKEv2协议扩展方案

实现了发起者和响应者之间的双向身份认证和平台认证

并建立了它们之间的会话密钥

且与IKEv2协议是向后兼容的

其中可信第三方(TTP)负责它们的身份证书验证、平台证明身份密钥(AIK)证书验证和平台完整性评估

它们的存储完整性度量日志(SML)被加密传输给可信第三方

从而有效地解决了现有可信计算环境下IKE协议扩展方案所存在的问题.此外

利用针对可信网络连接协议的串空间模型证明了该IKEv2协议扩展方案是安全的.

Abstract

On the basis of the IKEv2

an extended IKEv2 in trusted computing environment based on ISO/IEC 9798-3:1998/Amd 1:2010 is proposed in this paper. It realizes mutual identity authentication and Platform-Authentication between an initiator and a responder

and establishes session keys between them

and is backward compatible with the IKEv2

where a trusted third party (TTP) is responsible for validating the identity and Attestation Identity Key (AIK) certificates of them

and evaluating the platform integrity of them

and the stored integrity measurement logs (SML) of them are encrypted and sent to the TTP. Thus

it is able to solve the problems of the existing extended IKE protocol for trusted computing environment effectively. Moreover

the extended IKEv2 is proved secure based on the strand space model for trusted network connect protocols.

关键词

Keywords

references

Kaufman C. RFC 4306, Intern, t key exchange (IKEv2) protocol [S]. USA: IETF, 2005.

Xiao Y L, Wang Y M, Pang L J. Verification of trusted network access protocols in the strand space model [J]. IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences, 2012, E95-A(3): 665-668. DOI: 665

Lai X L. ISO/IEC 9798-3: 1998/Amd 1: 2010, Information technology security techniques entity authentication mechanisms - Part 3: Entity authentication using a public key algorithm - Amendment 1 [S]. USA: ISO/IEC, 2010.

Kaufman C, Hoffman P, Nir Y, et al. RFC 7296. Internet key exchange protocol version 2 (IKEv2) [S]. USA: IETF, 2014.

Sadeghi A R, Schulz S. Extending IPSec for efficient remote attestation [C]//Proceedings of the 14th international conference on financial cryptography and data security. Tenerife: Springer, 2010: 150-165.

Kaufman C, Hoffman P, Nir Y, et al. RFC 5996, Internet key exchange protocol version 2 (IKEv2) [S]. USA: IETF, 2010.

Eronen P, Hoffman P. RFC 4718, IKEv2 clarifications and implementation guidelines [S]. USA: IETF, 2006.

Kent S, Seo K. RFC 4301. Security architecture for the internet protocol [S]. USA: IETF, 2005.

Maughan D, Schneider M, Schertler M. RFC 2408, Internet security association and key management protocol (ISAKMP) [S]. USA: IETF, 1998.

Harkins D, Carrel D. RFC 2409. The internet key exchange (IKE) [S]. USA: IETF, 1998.

Herzog J C. The Diffie-Hellman key-agreement scheme in the strand space model [C]//Proceedings of the 16th IEEE computer security foundations workshop. Pacific, Grove: IEEE Computer Society, 2001, (3): 234-247.

Piper D. RFC 2407, The internet IP security domain of interpretation for ISAKMP [S]. USA: IETF, 1998.

Abd Aziz N, Setapa S, Udzir N I. Mutual remote attestation in IPSec based VPN [J]. International Journal of Cryptology Research, 2013, 4(1): 55-67. DOI: 55

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Microservices anomaly detection based on the correlation of monitoring metrics

A feature-oriented context understanding and slice analysis network for tuberculosis detection

Steganography model guided by attention mechanism and improved dense convolution

Aerial small object detection algorithm based on improved RT-DETR

A high-efficiency charge pump for ultra-low voltage boost systems

Related Author

No data

Related Institution

No data

AI问答

Postal code：100079
Tel：（010）53879206 Email：tmw@bjxintong.com.cn
Technical support is provided by Beijing Founder electronics co., LTD 京ICP备09082226号-64 京公网安备11010602201714号
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰