面向无线移动通信的应用需要保证信息的保密性、完整性、不可否认性和身份的真实性。本文分析了标准协议存在的安全和效率问题,基于ECC公钥密码体制,提出了一个面向无线应用的身份认证和密钥协商协议,协议中还设计了防范拒绝服务攻击的机制。文中给出了详细的协议,并从安全和效率的角度对协议进行了分析。 Applications for wireless mobile communications need to ensure the confidentiality, integrity, non-repudiation, and authenticity of the information. This paper analyzes the security and efficiency problems of standard protocols. Based on the ECC public key cryptosystem, this paper proposes a wireless application-oriented authentication and key agreement protocol, and a protocol to prevent denial of service attacks is also designed. The paper gives a detailed protocol and analyzes the protocol from the point of view of security and efficiency.