基于IC卡的改进型对称密码认证方法

Modified symmetrical password authentication based on IC card

根据目前IC卡对称加密认证方式,通过加入单向散列的PIN码以加强对称密码交互认证的安全性。方法的核心是首先得到PIN码与认证设备交互验证时的密钥,然后将此密钥与射频卡ID号进行组合加密计算得到真正用于认证的密钥。使用该方法可以不在卡中存储PIN码或PIN码的等价信息,防止卡被破解后PIN码的泄漏,并降低卡内2个扇区的占用。

Based on present symmetric encryption authentication pattern of IC card, an authentication method that adding Personal Identification Number （PIN） code to symmetric password authentication was put forward. Firstly the core of this method is getting the key when PIN code and authentication device is in interaction, and then getting the real authentication key by combining and computing these dual keys. By using this method PIN code or the equivalent information of PIN code need not to be stored in card. It prevents PIN＇s leakage after the card has been cracked, and reduce the occupation of the card＇s two sectors.