Identity-based one-pass key agreement and encryption protocol for secure IP

Jin Li; Qianqian Xing; Xiaofeng Wang; Jiang Zhang

doi:10.1117/12.2642610

28 July 2022 Identity-based one-pass key agreement and encryption protocol for secure IP

Jin Li, Qianqian Xing, Xiaofeng Wang, Jiang Zhang

Proceedings Volume 12303, International Conference on Cloud Computing, Internet of Things, and Computer Applications (CICA 2022); 123030L (2022) https://doi.org/10.1117/12.2642610
Event: International Conference on Cloud Computing, Internet of Things, and Computer Applications, 2022, Luoyang, China

Abstract

Existing key agreement protocol for IPSec, WireGuard, TLS and QUIC needs separate control message exchange. OKEP (Identity-based one-pass key agreement and encryption protocol for Secure IP) is a secure and lightweight protocol in network layer based on identity-based cryptography. It aims to reduce the number of message exchanges in the key agreement part. It realizes 0 RTT (Round Trip Time) key agreement in the first connection by sending parameter along with data in every packet. Using this mechanism, OKEP does not need to synchronize state after releasing the secure connection. In order to avoid transferring large amounts of data for authentication, OKEP uses the characteristic of identity is public key instead of certificate to achieve address validation. Unlike IPSec, WireGuard, TLS and QUIC, OKEP designs one packet format to accomplish key agreement, encryption and authentication rather not many packet formats. The experiment results show that compared to other secure protocols, OKEP can transmit less data to accomplish key agreement and address verification.

Citation Download Citation

Jin Li, Qianqian Xing, Xiaofeng Wang, and Jiang Zhang "Identity-based one-pass key agreement and encryption protocol for secure IP", Proc. SPIE 12303, International Conference on Cloud Computing, Internet of Things, and Computer Applications (CICA 2022), 123030L (28 July 2022); https://doi.org/10.1117/12.2642610

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available