基于动态ID的远程用户交互认证方案

Remote User Mutual Authentication Scheme Based on Dynamic ID

讨论了文献[13]提出的一个基于身份加密的智能卡认证方案,指出其不能抵抗智能卡丢失攻击、内部攻击和冒充攻击等,且不具备用户匿名性和前向安全性,在临时会话密钥协商和智能卡撤销操作上也存在缺陷。通过引入椭圆曲线公钥密码技术和注册随机因子,提出了一个基于动态ID的远程用户交互认证方案并对其进行分析。结果表明,新方案弥补了原方案的不足,且具有较高的效率。

A smart card-based authentication scheme using user identity cryptography was recently proposed by Chang et al. The scheme is found to be vulnerable to smart card loss attack, insider attack, impersonation attack, etc. It also has problems in session key agreement phase and smart card revocation phase. In addition, the scheme cannot achieve user anonymity and forward secrecy. This paper presents a dynamic ID-based remote user mutual authentication scheme by introducing the elliptic-curve public-key cryptography and registration random factor. Security and efficiency analysis shows that the new scheme eliminates the defects of Chang et al. ＇ s scheme while keeping the high performance.