Kimlik ve özellik tabanlı eşleme tabanlı kimlik doğrulama protokolleri

Authentication is one of the most important goals in cryptography. It provides sharing information with only authorized people and protecting data from being modified. Authentication can be achieved in various ways such as password-based, symmetric-key and public-key. The public-key authentication is the most preferred one among these options. It provides construction of key pairs and verification with based on hard mathematical problems. Public-key authentication is used as a basis for two important idea: Identity-Based Authentication (IBA) and Attribute-Based Authentication (ABA). The IBA systems are actually specialized publickey encryption systems where the public key is generated using an identity information of the user. ABA systems, which are the other important idea, are the generalizations of the IBA systems. While IBA systems cover only one attribute about users, ABA systems cover more than one attribute. In this thesis, identity-based and attribute-based authentication protocols are analyzed and a new attribute based authentication protocol is proposed. First, it is given the details and comparison of ID-based authentication protocols Shim,Yuan and Li, Tseng 2017 and Tseng 2015 which are based on elliptic curve. Shim,Yuan and Li and Tseng 2017 use pairings for authentication, while Tseng 2015 uses hash functions. Their securities and performances are analyzed. They provide the security properties such as known-key security, forward secrecy, key-compromise impersonation and unknown-key share. They also resist the passive, man-in-the-middle and reveal attacks. The protocols are more efficient than the protocols which are based on public-key by virtue of elliptic curve. Tseng 2015 is the most efficient one among them since it uses only hash functions. Also, the Zhang, Mu and Zhang attribute-based authentication protocol is studied. Then a new protocol, which is inspired from it, is designed. While Zhang et al. is based on public-key, the new protocol is constructed on elliptic curve basis. Moreover, controlling of attributes is simplified. It decreases the number of operations to determine necessary attributes. In this way, computational cost is reduced. The security analysis of the new protocol is presented and showed that the protocol is resistant to the following attack scenarios; adaptive chosen ciphertext, keycompromise impersonation, probing resistance, indistinguishable to eavesdroppers, forward secrecy and unknown key-share.