基于单向哈希函数的远程口令认证方案

New remote password authentication scheme based on one-way hash function

首先分析了Wu-Chieu认证方案和Lee-Lin-Chang认证方案存在的安全缺陷;然后提出了一种基于单向哈希函数和Diffie-Hellman密钥交换协议的远程口令认证方案。该认证方案不仅修正了上述两种认证方案存在的安全缺陷,而且实现了用户与远程系统之间的双向认证。由于该认证方案不要求用户与远程系统之间维护时间同步机制,更适用于大规模分布式网络环境。

This paper firstly demonstrated the security problems of the Wu-Chieu improved authentication scheme and LeeLin-Chang authentication scheme. Then, a new authentication scheme based on a one-way hash function and Diffie-HeUman key exchange was presented. This scheme not only could isolate such problems of the existing two schemes, but also could provide mutual authentication between the user and the remote system. Additionally, because the scheme did not require time synchronization between the user and the remote system, it was more applicable to various distributed network environment.