将基于身份的密码体制与远程多服务器密钥协商相结合,提出一种基于身份的远程多服务器密钥协商方案.用户注册时由私钥生成中心颁发私钥并安全存放于智能卡中.用户登录服务器前,双方采用基于身份的双线性配对计算进行双向身份认证,并协商生成会话密钥.服务器端无须保存口令表,用户端无须建立数据表存储相关登录信息,无须在终端能离线更改登录口令.该方案减少了密钥协商的通信开销、计算开销以及存储开销,在标准BR安全模型下该方案被证明是安全的. Based on the combination of identity-based cryptography with remote multi-server key agreement, an identity-based remote multi-server key agreement scheme is proposed, in which a private key generation center issues a private key and stores it securely in a smart card. Before the server, both parties use identity-based bilinear pairing calculation for two-way identity authentication and negotiate to generate the session key. The server does not need to save the password table, and the client does not need to set up a data table to store the relevant login information, This scheme reduces the communication costs, computation overhead and storage overhead of the key agreement, which proves to be safe under the standard BR security model.