认证测试方法在应用中出现的问题及改进

Improvement of Authentication Test in Application

在应用中,当关键原子值发生多次形式转换时,需要进行多次认证测试。鉴于此,本文引入了关键分量(Key Component)的概念,提出了多重认证测试(Multiple Authentication Test)方法。使用该方法重新设计了Woo-Lam协议,通过两个"挑战-响应"回合,确保主体角色的非对称性和响应者对发起者的身份认证。设计出的Woo-Lam协议不仅避免了原协议经认证测试方法改进后存在的缺少主体标识的缺陷,而且避免了Abadi和Buttyan等人分别对原协议改进后存在的两个重放攻击。

In application, when multiple form transformations of key atomic value occur, there should be multiple authentication tests. With the conception of Key Component, a new method called Multiple Authentication Test is presented. Then the Woo-Lain protocol is redesigned and improved by this method. Through two ＂challenge-response＂ runs, the role asymmetry and identity authentication of participants are ensured, not only avoiding the flaw in the protocol improved by Authentication Test, but also avoiding two replay attacks in the protocol improved by informal principles and BSW logic.