基于智能卡的高效远程口令识别方案

Efficient Remote Password Authentication Scheme Using Smart Cards

为了克服现有远程口令识别方案的缺陷,提出了一种基于离散对数和ElGamal公钥体制、用智能卡实现的远程口令识别方案.在此方案中,合法用户在注册阶段可以自由地选择自己的口令,在口令验证阶段服务器端无须存放用户的口令验证表.该方案可以抵御伪造攻击和重传攻击.

To overcome the shortcoming of the present schemes, a remote password authentication scheme based on discrete logarithms and ElGamal public key scheme and using smart cards was proposed. In this scheme, any legitimate user can freely choose his own password at the registration phase, and at the verification phase, the scheme can verify the remote password without the need of his verification table. Forgery and replay attacks can be resisted using the scheme.