Simple Group Password-Based Authenticated Key Agreement without Server Public Keys

• Main Authors: Cheng-Yu Chiang, 江政育
• Other Authors: Tian-Fu Lee
• Format: Others
• Language: zh-TW
• Published: 2009
• Online Access: http://ndltd.ncl.edu.tw/handle/82927673094068991732

碩士 === 立德大學 === 資訊科學與應用研究所 === 97 === he group password-based authenticated key agreement (GPAKE) allows a group of users to establish a common session key by using the password authentication. Then, the group of users can securely communicate by using this session key. In order to provide higher security, most approaches about GPAKE use the public key infrastructure (PKI). However, it not only increases the users’ overheads, but also requires to maintain the public key system. This thesis proposes a simple group password-based authenticated key agreement (SGPAKE) protocol. The proposed SGPAKE protocol does not require using the server or users’ public keys. The users only remember their weak passwords, can authenticate each other, and obtain a common session key. Then, these users can securely communicate by using this session key. Therefore, the proposed SGPAKE protocol not only provides communicating users with convenience, but also keeps the security properties.