一类动态密码认证协议的安全研究

Security research on dynamic password authentication protocols based on one-way Hash function

为了克服已有的针对动态密码认证(HDPA)的安全性分析的局限性.首先对已有的HDPA协议进行抽象,形成一个框架,对该框架从两个新角度进行安全性分析,即协议核心计算函数的安全性质和验证数据的安全关系.在分析过程中给出了HDPA协议框架的核心计算函数需要满足的安全属性和验证数据的安全关系对协议安全性影响.由于分析对象的抽象性和分析角度的新颖性,本文的分析结果具有独特性和启发性.

The existent analysis approaches to security properties of HDPA focus on protocol instances and attack models. To overcome this limitation, this paper proposes a framework for the existent HDPA protocols and analyzes its security properties so that the result can be applied to the most of the existent HDPA protocols. The security analysis focuses on two aspects： the security properties of computing functions and the security relation between verifiers. This method offers new insights into security orooerties of HDPA.