© 2026 Aqora Quantum S.A.S.

Terms Privacy Legal Notice

Provably secure and efficient identity-based key agreement protocol for independent PKGs using ECC

Mohammad Sabzinejad Farash, Mahmoud Ahmadian‐Attari

Published Jan 1, 2013• 20 citations

Abstract

A B S T R A C T Key agreement protocols are essential for secure communications in open and distributed environments. Recently, identity-based key agreement protocols have been increasingly researched because of the simplicity of public key management. The basic idea behind an identity-based cryptosystem is that a public key is the identity (an arbitrary string) of a user, and the corresponding private key is generated by a trusted Private Key Generator (PKG). However, it is unrealistic to assume that a single PKG will be responsible for issuing private keys to members of dierent organizations or a large-scale nation. Hence, it is needed to consider multiple PKG environments with dierent system parameters. In this paper, we propose an identity-based key agreement protocol among users of dierent networks with independent PKGs, which makes use of elliptic curves. We prove the security of the proposed protocol in the random oracle model and show that all security attributes are satised. We also demonstrate a comparison between our protocol and some related protocols in terms of the communication costs and the execution time. The results show that the execution time of our protocol is less than 10%, and its communication costs are about 50% of the competitor protocols.

DOI: 10.22042/isecure.2013.5.1.4

Related papers

An efficient identity-based key agreement protocol in a multiple PKG environment

Huan Zhou, Xiaofeng Wang, Jinshu Su

Identity-based key agreement protocol affords a natural way to combine the participant’s identity with its public key. However, most of them just consider the key agreement in a single private key generator (PKG) environment. In addition, the existing key agreement protocols have a great computing overhead for mobile computing which is more and more popular today. This paper proposes a new identity based key agreement protocol. With the help of mathematical tools, we make our protocol applied in multiple PKG environment. It also satisfies all the security properties which is set for key agreement protocol. Moreover, some of its time-consuming operations can be delivered to untrusted public computation resources, so its computing complexity can be greatly reduced.

Wuhan University Journal of Natural Sciences•Sep 9, 2014•3 citations

Identity based group key agreement in multiple PKG environment

Wang Liming, Wu Chuankun

Secure and reliable group communication is an increasingly active research area by growing popularity in group-oriented and collaborative applications. In this paper, we propose the first identity-based authenticated group key agreement in multiple private key generators (PKG) environment. It is inspired on a new two-party identity-based key agreement protocol first proposed by Hoonjung Lee et al. In our scheme, although each member comes from different domain and belongs to different PKGs which do not share the common system parameters, they can agree on a shared secret group key. We show that our scheme satisfies every security requirements of the group key agreement protocols.

Wuhan University Journal of Natural Sciences•Nov 1, 2006•1 citation

AUTHENTICATED IDENTITY-BASED KEY AGREEMENT PROTOCOLS IN A MULTIPLE INDEPENDENT PKG ENVIRONMENT

Hoonjung Lee, Kim Hyunsook, Sangjin Kim +1 more

An authenticated identity-based key agreement protocol in a multiple independent PKG(Private Key Generator) is provided to improve efficiency of pairing calculation by minimizing a quantity of paring calculation in a private key generator environment. An authenticated identity-based key agreement protocol in a multiple independent private key generator includes a 2PAK-MPE(2-Party Authenticated Key agreement protocol for Multiple PKG environment) protocol, and a 3PAK-MPE protocol. The 3PAK-MPE protocol blocks an intermediate attack by establishing a safe channel between participants and transmitting/receiving values. The 3PAK-MPE protocol includes the steps of: generating a public key by performing the 2PAK-MPE protocol with another user; and authenticating the user through the safe and authenticated communication channel which is established through the generated public key, and generating a final session key by exchanging the values which are used in the cession key generation.

Information Security and Cryptology•Jan 1, 2005•0 citations

An Efficiency Improved ID-based Tripartite Key Agreement Protocol

Park Young-Ho, Rhee Kyung-Hyune

As the ID-based public key cryptosystems become a very active research area, a number of ID-based key agreement protocols have been proposed, but unfortunately many of them were analyzed that there were some security flaws in the protocols. In addition to key agreement protocols, in recent, Liu et al. and Kim et al. proposed the key agreement protocols that multiple session keys are established at once among participated entities. In this paper, we propose an ID-based tripartite key agreement protocol that establishes 8 keys by improving the efficiency of the Liu et al's. Moreover, the proposed protocol can be used in the situation where multiple different private key generators(PKG) are involved. Therefore, because the private key issued by different PKGs belonging to each entity's domain can be used, our proposed scheme is more efficiently applicable to the practical applications.

Information Security and Cryptology•Jan 1, 2005•0 citations

Identity-basedAuthenticatedKeyAgreementProtocolCrossAutonomousDomains

Xue Zhang, Guangsong Li, 韩文报 +2 more

Abstract:Current identity-based authenticated key agreement schemes still have restriction on PKG system parameters.The assumption limits the application in real network environment.In order to solve these problems,an identity-based cross-domain authenticated key agreement protocol was proposed.There is no restriction on PKG system parameters so that public system parameters,system master keys and system public keys can be totally different.The security of this scheme was analyzed under the eCK model,and the result showed that this protocol satisfies the basic security requirements,perfect forward secrecy and PKG forward secrecy.Moreover,this protocol is robust to the existing attacks such as key compromise impersonation attack and ephemeral key compromise impersonation attack. Comparison with some typical identity-based multi-domain authenticated key agreement protocols showed that this scheme is more secure and efficient.

•Jan 1, 2015•0 citations

Efficient ID-based authenticated key agreement protocol

Haiying Gao

Wang et al.(WANG SHENG-BAO,CAO ZHEN-FU,DONG XIAO-LEI.Provably secure identity-based authenticated key agreement protocols in the standard model.Chinese Journal of Computers,2007,30(10):1842-1854) proposed an ID-based Authenticated Key Agreement(IDAKA) protocol which was proved secure under standard model but without attribute of Private Key Generator(PKG) forward security.In order to remedy the flaw,a new protocol was introduced in which the shared secret message was calculated by the private key and temporary secret information of users of the protocol,and its security was also proved in standard model.Compared with known protocols,the new protocol is more efficient.Additionally,a method of jointly generating private key by PKG and user was proposed.The private key of user was calculated by the main secret key of system and secret information provided by user.It effectively solves the problem of PKG forward security of ID-based authenticated key agreement protocol.

Journal of Computer Applications•Jan 1, 2012•1 citation

A B S T R A C T Key agreement protocols are essential for secure communications in open and distributed environments. Recently, identity-based key agreement protocols have been increasingly researched because of the simplicity of public key management. The basic idea behind an identity-based cryptosystem is that a public key is the identity (an arbitrary string) of a user, and the corresponding private key is generated by a trusted Private Key Generator (PKG). However, it is unrealistic to assume that a single PKG will be responsible for issuing private keys to members of dierent organizations or a large-scale nation. Hence, it is needed to consider multiple PKG environments with dierent system parameters. In this paper, we propose an identity-based key agreement protocol among users of dierent networks with independent PKGs, which makes use of elliptic curves. We prove the security of the proposed protocol in the random oracle model and show that all security attributes are satised. We also demonstrate a comparison between our protocol and some related protocols in terms of the communication costs and the execution time. The results show that the execution time of our protocol is less than 10%, and its communication costs are about 50% of the competitor protocols.

Identity-based key agreement protocol affords a natural way to combine the participant’s identity with its public key. However, most of them just consider the key agreement in a single private key generator (PKG) environment. In addition, the existing key agreement protocols have a great computing overhead for mobile computing which is more and more popular today. This paper proposes a new identity based key agreement protocol. With the help of mathematical tools, we make our protocol applied in multiple PKG environment. It also satisfies all the security properties which is set for key agreement protocol. Moreover, some of its time-consuming operations can be delivered to untrusted public computation resources, so its computing complexity can be greatly reduced.

Secure and reliable group communication is an increasingly active research area by growing popularity in group-oriented and collaborative applications. In this paper, we propose the first identity-based authenticated group key agreement in multiple private key generators (PKG) environment. It is inspired on a new two-party identity-based key agreement protocol first proposed by Hoonjung Lee et al. In our scheme, although each member comes from different domain and belongs to different PKGs which do not share the common system parameters, they can agree on a shared secret group key. We show that our scheme satisfies every security requirements of the group key agreement protocols.

An authenticated identity-based key agreement protocol in a multiple independent PKG(Private Key Generator) is provided to improve efficiency of pairing calculation by minimizing a quantity of paring calculation in a private key generator environment. An authenticated identity-based key agreement protocol in a multiple independent private key generator includes a 2PAK-MPE(2-Party Authenticated Key agreement protocol for Multiple PKG environment) protocol, and a 3PAK-MPE protocol. The 3PAK-MPE protocol blocks an intermediate attack by establishing a safe channel between participants and transmitting/receiving values. The 3PAK-MPE protocol includes the steps of: generating a public key by performing the 2PAK-MPE protocol with another user; and authenticating the user through the safe and authenticated communication channel which is established through the generated public key, and generating a final session key by exchanging the values which are used in the cession key generation.

As the ID-based public key cryptosystems become a very active research area, a number of ID-based key agreement protocols have been proposed, but unfortunately many of them were analyzed that there were some security flaws in the protocols. In addition to key agreement protocols, in recent, Liu et al. and Kim et al. proposed the key agreement protocols that multiple session keys are established at once among participated entities. In this paper, we propose an ID-based tripartite key agreement protocol that establishes 8 keys by improving the efficiency of the Liu et al's. Moreover, the proposed protocol can be used in the situation where multiple different private key generators(PKG) are involved. Therefore, because the private key issued by different PKGs belonging to each entity's domain can be used, our proposed scheme is more efficiently applicable to the practical applications.

Abstract:Current identity-based authenticated key agreement schemes still have restriction on PKG system parameters.The assumption limits the application in real network environment.In order to solve these problems,an identity-based cross-domain authenticated key agreement protocol was proposed.There is no restriction on PKG system parameters so that public system parameters,system master keys and system public keys can be totally different.The security of this scheme was analyzed under the eCK model,and the result showed that this protocol satisfies the basic security requirements,perfect forward secrecy and PKG forward secrecy.Moreover,this protocol is robust to the existing attacks such as key compromise impersonation attack and ephemeral key compromise impersonation attack. Comparison with some typical identity-based multi-domain authenticated key agreement protocols showed that this scheme is more secure and efficient.

Wang et al.(WANG SHENG-BAO,CAO ZHEN-FU,DONG XIAO-LEI.Provably secure identity-based authenticated key agreement protocols in the standard model.Chinese Journal of Computers,2007,30(10):1842-1854) proposed an ID-based Authenticated Key Agreement(IDAKA) protocol which was proved secure under standard model but without attribute of Private Key Generator(PKG) forward security.In order to remedy the flaw,a new protocol was introduced in which the shared secret message was calculated by the private key and temporary secret information of users of the protocol,and its security was also proved in standard model.Compared with known protocols,the new protocol is more efficient.Additionally,a method of jointly generating private key by PKG and user was proposed.The private key of user was calculated by the main secret key of system and secret information provided by user.It effectively solves the problem of PKG forward security of ID-based authenticated key agreement protocol.