Abstract: Group authenticated key agreement protocol can help participants establish a session key in an open communication channel. In this paper, it proposes an effective PKC-based certificateless group authenticated key agreement protocol, the certificateless mechanism of the protocol simplifies the complex certificate management problem and key escrow problem in ID-based protocols. The security of the scheme is proved and its computational cost is discussed. The result shows that the new protocol is secure and effective.

Key words: group key agreement, certificateless protocol, provable security, key escrow, Public Key Infrastructure（PKI）

摘要： 群认证密钥协商协议可以使多个参与者在公开信道中建立会话密钥。提出了一种高效的基于PKC的无证书群认证密钥协商协议，由于采用了无证书机制，简化了基于证书的协议中复杂的证书管理问题，同时也解决了基于身份的协议中密钥托管问题。还对新协议进行了严格的形式化证明和计算量的横向比较，结果显示，新协议是安全且高效的。

关键词: 群密钥协商, 无证书协议, 可证明安全, 密钥托管, 公钥基础设施