摘要
首先分析了Wu-Chieu认证方案和Lee-Lin-Chang认证方案存在的安全缺陷;然后提出了一种基于单向哈希函数和Diffie-Hellman密钥交换协议的远程口令认证方案。该认证方案不仅修正了上述两种认证方案存在的安全缺陷,而且实现了用户与远程系统之间的双向认证。由于该认证方案不要求用户与远程系统之间维护时间同步机制,更适用于大规模分布式网络环境。
This paper firstly demonstrated the security problems of the Wu-Chieu improved authentication scheme and LeeLin-Chang authentication scheme. Then, a new authentication scheme based on a one-way hash function and Diffie-HeUman key exchange was presented. This scheme not only could isolate such problems of the existing two schemes, but also could provide mutual authentication between the user and the remote system. Additionally, because the scheme did not require time synchronization between the user and the remote system, it was more applicable to various distributed network environment.
出处
《计算机应用研究》
CSCD
北大核心
2008年第2期512-515,共4页
Application Research of Computers
基金
国家自然科学基金资助项目(60472022)
河南省科技厅软科学课题资助项目(0313025300,0313033100)
关键词
认证
口令
智能卡
authentication
password
smart card