云环境下基于ECC的动态口令认证方案设计

Under the Cloud-Based ECC Dynamic Password Authentication Scheme Design

在基于口令的认证方案中,参与者通过使用低熵的口令实现身份认证,避免了在身份认证过程中必须有公钥基础设施或要求用户存储长对称密钥的安全硬件等条件,从而方便了用户的使用。目前,云认证技术存在效率低、安全性不高、实现复杂等问题。因此,鉴于基于口令的认证方式操作简单、易于实现的优点,对基于口令的身份认证方案进行改进,使其适用于共有云或私有云环境,并对其安全性进行了分析。

The password-based authentication scheme,participants through the use of low-entropy passwords for identity authentication,avoid the authentication process must have a public key infrastructure or require users to store long symmetric key security hardware and other conditions,which convenient for users to use. Currently,the presence of low cloud authentication technology efficiency,security is not high,complex problems. Therefore,in view of password-based authentication method is simple,easy to realize the advantages of paper-based password authentication scheme be improved to make it suitable for public cloud or private cloud environment,and analyzed its security.