Medical Internet not only enables the patient to more easily access to health care,also can let the doctor more real-time and accurately obtain the patient’s physical condition to develop more effective treatments,but people are enjoying the advantages of medical Internet at the same time,how to protect the safety of medical content networking equipment communication,how to guarantee the patient’s privacy don’t leak is very important question.Anonymous authentication and Key Exchange protocol allows the client to establish session key with the server on the basis of anonymous authentication.As a very convenient security technology with privacy protection,it has attracted much attention.How to design efficient and secure identity authentication protocol in the medical Internet of Things environment is one of the important issues to ensure the stable operation of the medical Internet of Things system.This thesis mainly studies the identity authentication technology in the medical Internet of Things system,and the specific work is as follows:1.An anonymous authentication and key exchange protocol based on smooth projection hash function is proposed.Smoothness and correctness are the two most important properties of smooth projection hash function.Correctness enables the client to negotiate the same high-entropy session key with the remote server only with a low entropy password,and smoothness ensures that the server can still complete authentication without knowing the identity of the client.A one-time signature scheme and a public key encryption scheme against plaintext attack are introduced to ensure the authenticity of authentication messages,and finally anonymous two-way authentication is realized to obtain a high entropy session key.BAN logic is used to prove the correctness of the protocol,and the security of the protocol is proved under the standard model.Compared with existing protocols of the same type,the computation cost of this protocol is greatly reduced.2.An efficient anonymous authentication and key exchange protocol based on homomorphic encryption is proposed.With a low entropy password as Shared secret and encryption processing the parameters,and utilize the homomorphic encryption to keep the characteristics of the operation,the service side to restore the need for the client identity corresponding key parameters,and then complete the certification operation,through the parameters of culture to achieve the client identity and strong anonymity,namely the service side with any third party can’t learn the true identity,At the same time,the message can not be linked,and the protocol security and privacy are further improved.The security of the protocol is based on the assumption of DDH difficult problem,and semantic security is achieved by using pseudo-random functions and other cryptographic primiples to ensure the indiscernability of messages during authentication.The performance comparison shows that this protocol has some advantages. |