一种新型抵御字典攻击的认证方案  

New authentication scheme to counter online dictionary attacks

作　　者：於时才[1] 胡佳文[1] 靳艳峰[1] 

机构地区：[1]兰州理工大学计算机与通信学院,甘肃兰州730050

出　　处：《计算机工程与设计》2007年第8期1798-1800,1803,共4页Computer Engineering and Design

摘　　要：身份验证是网络应用系统中的第一道防线,目的是验证通信双方的身份,防止非法用户窃取和假冒合法用户。尽管通过口令是最方便的身份验证方法,但它也伴随着字典攻击的威胁。分析了常用的几种一次性口令身份认证方案,在挑战-响应方案基础上,利用安全单向哈希函数提出并设计了一种新型身份验证方案。该方案不仅明显减少了认证服务器的开销,而且能有效地抵御字典攻击、拒绝服务攻击等攻击手段,显著增强了应用系统的安全性。Authentication is the first line of defence in the network application system. The aim is authenticating the identification of both side of communication and preventing illegal users to filch and masquerade genuine users. Though passwords are the most convenient means of authentication, they bring along themselves the threat of dictionary attacks. Several typical authentication protocols are analyzed. On the basis of challenge-response system a new type of authentication scheme by using one way hash functions is proposed and constructed. The scheme can not only reduce the overhead of the server obviously, but also counter the online dictionary attacks and denial of service （DOS） attacks and so on. The security of the application system greatly is enhanced.

关 键 词：身份验证 在线字典攻击 哈希函数 密码协议 口令 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]