远程登录几何认证方案的安全漏洞分析和解决办法

Cryptanalysis of a Remote Login Authentication Scheme Based on Geometric and Improvement Approach

1995年,Tzong-ChenWu提出了一种基于欧几里德二维平面空间几何特性的远程登录身份认证方案。因为这种方案的计算复杂度很低,所以极其适合基于智能卡的安全应用。Hwang在1999年首次指出了这种认证方案存在的一个安全漏洞。最近,Huang-YuChien等人再次分析了这个方案,针对Hwang发现的安全漏洞,提出了一种新的攻击方法。不仅如此,Huang-YuChien等人还针对上述安全漏洞,给出了行之有效的解决方案。文章对这种远程登录几何认证方案做了进一步的安全性分析,指出了一些尚未被Hwang和Chien等人发现的安全隐患,并给出了相应的解决方法。

In1995,Wu proposed a smart card-oriented remote login authentication scheme based on a geometric approach.The scheme has a very low computational complexity,so it is very suitable for security application based on smart card.Hwang pointed out insecurity involved in the scheme in1999.Recently,Chien gave further a different approach to break the scheme and also proposed a modified scheme which can with-stands the security attacks found by Hwang and Chien.In this paper,authors do further cryptanalysis of scheme proposed by Wu and point out some other insecurity still involved in the scheme,of which Hwang and Chien have been unaware.