| Device-to-Device group communication technology shows great potential in the era the continued growth of network terminals and the huge period of communication needs.On the one hand,it has the advantages of reducing the power consumption of base stations,reducing communication delays,and increasing channel utilization.On the other hand,due to the lack of security mechanism,there are many security risks such as data leakage and identity counterfeiting.This thesis focuses on the identity authentication and key agreement protocol for D2 D group communication.It is found that the existing protocol research assumes that there is a secure channel between D2 D users and servers,but this is difficult to achieve in D2 D group communication under the partial coverage of cellular network.And most of the existing protocols are designed on the identity-based cryptosystem,which leads to the key escrow problem.At the same time,some protocols do not perform well due to the large use of bilinear operation,and do not consider the session key update.Some protocols also have problems that are not conducive to dynamic management of group members.In view of the above problems,this thesis has carried out the following three works:(1)Aiming at the D2 D communication scenario partially covered by cellular network,PCD-AKA(Authentication and Key Agreement protocol for Partially Covered D2 D group communication)is designed.PCD-AKA realizes UE-to-GL and UE-to-UE authentication,secure upload of user public key,secure public key distribution strategy and session key negotiation process.It also takes into account session key update and dynamic group member management during group generation.Security analysis and simulation results show that PCDAKA can realize authentication,privacy protection,data confidentiality and forward/backward security without assuming that all users and servers have secure channels.Meanwhile the UE in PCD-AKA has a good and stable computing cost.In the test environment of this thesis,when the user scale is less than 100,the total computing cost of the UE remains below 23 ms,and the increase is only 5.48μs with the expansion of the user scale.(2)In order to improve the computational efficiency of the protocol and solve the problem of public key verification,an efficient verifiable public key pairless certificateless signature scheme VP-CLS is designed.VP-CLS can achieve EU-CMA security under the random oracle model,and the signature phase costs only 266.18μs.Subsequently,based on VP-CLS design FCD-AKA(Full Coverage D2 D group communication identity Authentication and Key agreement protocol).Security analysis and simulation results show that FCD-AKA implements UE-to-UE authentication,session key agreement,session key update and dynamic group member management.The increase of UE and server’s computational cost is 0.97 ms and 0.56 ms respectively in FCD-AKA,which has certain advantages over similar schemes.(3)Finally,this thesis designs and implements the D2 D group communication identity authentication and key agreement system,based on C & C + + language.The system restores the operation procedure and algorithm implementation details of PCD-AKA and FCD-AKA protocol to verify the implementation of the protocol.Prose function subsystem realizes the service side function of PCD-AKA and FCD-AKA schemes.and the PCD-AKA user subsystem and FCD-AKA subsystem realize the user side function of corresponding schemes.The system test results indicate that the system can successfully and accurately implement the various processes described in the PCD-AKA and FCD-AKA protocols,and finally implement user authentication,session key agreement,and session key updates for the above-mentioned two types of D2 D group communications. |