动态ID多因素远程用户身份认证方案的改进

An improved identity authentication scheme of dynamic ID multi-factor remote users

基于动态身份信息ID的远程用户身份认证方案,在保证远程用户身份匿名性及不可追踪性的前提下,可实现远程用户与服务器端的双向身份认证。对Yang提出的基于动态ID的远程用户身份认证方案进行了安全分析,指出Yang方案无法抵御重放攻击、服务器伪装攻击、用户伪装攻击,且不能提供双向认证。针对这些缺陷,提出了一种多因素远程用户身份认证方案的改进,并进行了安全性和效率分析,分析结果表明,改进的方案弥补了Yang方案的不足,且具有较高的安全性能。

A remote user authentication scheme based on dynamic ID can achieve mutual authentication between remote users and the server under the premise of ensuring anonymity and untraceability of remote user identity. We analyze the security of Yang’s remote user authentication scheme based on dynamic ID, and point out that Yang’s scheme cannot resist replay attack, sever masquerade attack, user masquerade attack or provide mutual authentication. Aiming at the defects of Yang’s scheme, we propose a multi-factor remote user authentication scheme and analyze its security and efficiency. The analysis results show that the improved scheme can overcome the shortcomings of Yang’s scheme and has higher security performance.