基于循环移位运算的多服务器的密钥认证方案

Key authentication scheme for multi-server based on cyclic shift operation

为适应多服务器环境下密钥认证,并确保信息的安全,提出一种超轻量级的多服务器的密钥认证方案。采用一种自主设计的加密算法,即循环移位运算实现信息加密;循环移位运算可基于按位运算实现,使系统整体计算量达到超轻量级别;将用户口令与生物特征值相结合,抵抗假冒攻击等。从安全性、计算量等多角度分析文中方案,其结果表明,该方案能够抵抗重放、穷举等常见类型攻击,计算开销满足现有系统计算量低要求。

To adapt to key authentication in multi-server environment and ensure the security of information,an ultra-lightweight multi server key authentication scheme was proposed.A self-designed encryption algorithm was adopted,namely cyclic shift operation,to realize information encryption.The cyclic shift operation was realized based on bit-by-bit operation,so that the overall calculation amount of the system reached the ultra-lightweight level.The combination of user password and biometric value effectively resisted counterfeiting attacks.The scheme is analyzed from the aspects of security and computation,which shows that the scheme can resist common types of attacks such as replay and exhaustion,and the computational overhead meets the requirements of low computation of existing systems.