基于混合机制的Kerberos安全性增强方案

摘要

Aiming at the vulnerability and security problem of Kerberos protocol, an enhanced scheme of Kerberos protocol based on hybrid cryptosystem is put forward. The aims of the improved scheme are able to defend the password attacks and the insider threads. Public keys and private keys are assigned to the application servers and the AS server, the session key between user and application server is generated by DH key exchanged algorithm. The improved Kerberos protocol is given by six steps and the security is analyzed. Analysis shows that the new scheme can enhance the security of Kerberos and is more efficient than Public key encryption mechanism.%针对Kerberos协议的弱点和安全性问题，提出了一个基于混合加密机制的Kerberos改进方案，目的是防范口令攻击和内部攻击。给应用服务器和AS服务器分配公钥和私钥，用户与服务器之间的会话密钥由DH密钥交换生成。给出了改进后的 Kerberos 协议的六个步骤，并对安全性进行分析。分析结果表明，新方案能够增强Kerberos协议的安全性，而且比公钥加密机制高效。