针对身份与位置分离网络中接入协议的安全问题,提出一种可证明的三元认证接入协议,实现了所有通信实体(终端、接入交换路由器和认证服务器)的双向认证,有效地防止了未授权终端的接入,防止了伪造的认证服务器和非法的接入交换路由器.通过对Ballare-Rogaway模型的扩展和性能分析可知,该协议基于BR扩展模型是可证明安全的. Aiming at the security problem of the access protocol in the network of identity and location separation, this paper presents a proven ternary authentication access protocol, which realizes bidirectional authentication of all communication entities (terminals, access switching routers and authentication servers) and effectively prevents The access of the unauthorized terminal prevents the forged authentication server and the illegal access switch router.Based on the extension and performance analysis of the Ballare-Rogaway model, it is proved that the protocol is provably secure based on the BR extension model.