多服务器架构下的三因子认证及密钥协商协议

Three-Factor Authentication and Key Agreement Protocol for Multi-Server Architecture

为实现不同身份的用户访问指定的信息资源,拒绝未授权的非法用户访问网络资源,从而保护网络参与者的信息安全,针对身份认证及密钥协商协议难以实现用户匿名性、三因子安全性及前向安全性的问题,提出了一种新的三因子认证及密钥协商协议。该协议可应用于多服务器网络环境。对其安全证明和性能分析表明,该协议安全实用,并且能有效抵御各类已知攻击。

In order to enable users with different identities to access the specified information resources and refuse unauthorized illegal users to access the network resources, so as to protect the information security of network participants, aiming at the problem that identity authentication and key agreement protocols are difficult to achieve user anonymity, three-factor security and perfect forward security, a new three-factor authentication and key agreement protocol are proposed. The protocol can be applied to multi-server network environment. The security proof and performance analysis of the new protocol show that the new protocol is safe, practical and can effectively resist all kinds of known attacks.