一种改进的动态口令生成算法及重同步方案

An Enhanced Dynamic Password Generation Algorithm and Resynchronization Scheme

依据HTOP认证架构,结合密钥生成算法、EHMAC算法和动态截短函数设计了一种改进的动态口令生成算法EOTP,并利用该算法设计了能够满足身份认证系统基本要求的认证协议.此外,为了解决失步问题,提出基于窗口机制的重同步方案,将其分为窗口内和窗口外两种同步方式.最后,对所提算法和协议的性能及安全性进行了分析,该算法和协议执行速度快,易于通过令牌或智能卡硬件实现,能够有效抵抗蛮力攻击、口令窃取和截获/重放消息等攻击方式,具有很高的安全性.

According to HOTP authentication framework, an enhanced dynamic password generation algorithm EOTP is designed, combined with key generation algorithm, EHMAC algorithm and dynamic truncated function. At the same time, a detailed authentication protocol based on EOTP algorithm is proposed to meet the basic requirements of authentication system. Besides, in order to solve the problem of stepping out, a resynchronization scheme based on window mechanism is designed to provide inside window resynchronization and outside window resynchronization. Finally, the security and performance of the proposed algorithm and protocol are analyzed. Results show that the algorithm has fast computing speed and high security, and it is easy to be implemented by using token or smart card hardware. The protocol can resist attacks such as brute-force attack, password theft, dictionary attack and interception/replay attack effectively, and has very high security.