基于图像认证的个性化用户认证方法研究

Study on Personal User Authentication Method Based on Photographic Authentication

普适计算是未来的计算模式,人们可以随时、随地获得满意的服务。结合未来普适计算环境下设备的多样性和用户的个性化需求,对图像认证方法进行了扩展进而提出个性化认证方案,图像认证方法利用用户对图片的识别能力验证登录者是否为用户本人,从而可以抵抗重放攻击。该认证方案使用一种组合办法既减少每次认证暴露给第三方的信息,又提高了安全性,同时可提供多种媒体形式供用户识别,实验结果与分析表明该方法是可行的,用户可以接受这种认证方式。

Pervasive computing is a computing paradigm for future, in which a user can get satisfied service at anytime and anywhere. Considering trends of user personalization and device diversity, a personal user authentication method by extending the photographic authentication method is proposed. Photographic authentication identifies the right user by user＇s ability to recognize personal photographs, so it can withstand replay attacks. This method can reduce information exposure and enhance system security with a combinatorial choosing objects scheme. Experimental results and security analysis show that this method is acceptable and viable. It can reasonably withstand replay attacks.