一种改进的基于USB存储设备的用户口令认证协议

An Improved User Password Authentication Protocol with USB Storage Devices

在对Jiang等人的协议进行安全性分析的基础上,针对其不能抵抗DoS攻击和内部人员攻击的缺陷,提出了改进方案。此改进方案加入了Cookie机制,并结合了哈希函数和加密方法,使得改进后的口令认证协议不仅能抵抗DoS和内部人员的攻击,而且实现了用户的匿名性,从而保护了用户的隐私,具有更高的安全性。

Based on the security analysis of Jiang et al. 's protocol,this paper proposes an improved scheme on account of the Denial of Service( DoS) attack and insider attack. The improved scheme joined the cookie mechanism,and combined with the hash function and encryption method,the improved password authentication protocol can not only resist the attack of DoS attack and insider attack,but also can achieve the realization of the anonymity of the user,so as to protect the user's privacy and has higher security.