一种智能卡口令认证方案的分析与改进

Analysis and Improvement of a Passwo rd Authentication Scheme with Smart Cards

袁,吕提出了一种智能卡口令认证方案。在他们的方案中,用户能随意更改口令,远程系统不需要存储用户的口令表或验证表,并能防止重放攻击。作者指出袁—吕方案不能抵抗假冒攻击,并进行了改进。

Yuan and Lüproposed a password auth en tication scheme with smartcards .I n their scheme users can change their passwo rds freely and the remote system does not need the directory o f passwords or ve rification tables,and replay attack can be avoided.In this paper ,the aut hor s show that the Yuan-Lüscheme can' t resist personate attack and propose an i m-provement that overcomes the secure leak .