基于非齐次线性方程组的一次性口令认证协议

One-time Password Authentication Protocol Based on Non-homogeneous Linear Equations

刘丽等提出的基于非齐次线性方程组的身份认证协议和消息认证协议(装甲兵工程学院学报,2005年第2期)是一类单向认证协议,不能抵御伪服务器攻击,只能针对已固定终端的计算机网络通信系统。在保留其对用户认证便利性及安全性等优点的前提下,利用RSA算法对原方案进行改进,使其成为安全的双向认证协议。改进方案能够克服原方案的安全漏洞,保证更高的安全性和可操作性。

An identity authentication protocol and a message authentication protocol based on non-homogeneous linear equation proposed by Liu Li and two other co-authors（Journal of Academy of Armored Force Engineering,2005,No.2） uses a single authentication protocol which can not resist the pseudo-sever attack,and can be only applied in computer network communication system of fixed terminal.To solve the problem,this paper proposes an improved scheme： a mutual authentication protocol by using RSA arithmetic at the convenience of user authentication and security.The new scheme can conquer the security problem of the original scheme and hold higher security and operability.