The traditional authenticated DH protocol with PFS against active adversaries, ensures that the compromise of both party's long-term private keys after the session is completed will not help the adversary to compute session key, even adversary gets involved in the generation of messages.
An ID-based key-exchange has some differences with the traditional ones, such as it needs a KGC,
and public/private key generation is handled differently compared with the traditional ones.
Compared with the traditional authenticated DH protocol, what's the advantage of ID-based ones?
And if I want to design a ID-based key-exchange protocol with a bilinear pairing especially under eCK model, are there some ways to realise PFS against active adversaries besides using digital signatures?
Where should I pay particular attention?