一种安全高效的智能卡口令认证方案

An secure and efficient dynamic password authentication protocol based on smart card and fingerprint

针对Khan M K方案存在的缺陷进行分析,详细阐述可能的攻击方法及步骤,总结提出一种改良的基于生物特征和智能卡的口令身份认证方案。改良方案延用简单高效的杂凑和异或操作,但填补了原方案中的诸多漏洞,不失为一个高效可行的远程身份认证协议。

The shortages existing in Khan et al＇s scheme are analyzed carefully and its possible attack methods and steps are expounded. Then, an improved remote authentication scheme is introduced, which is based on biologic character and smart card. The new scheme ueses simple and effective hash and exclusive-or operations and can fill the many loopholes in ficient and feasible remote authentication protocol. the original scheme. Therefore, the proposal is an efficient and feasible remote authentication protocol.