一种新的基于动态口令的远程双向认证  

A new Remote Double Authentication Scheme Based on Dynamic Password

作　　者：李涛[1] 曾英[2] 甄姬娜[1] 

机构地区：[1]郑州大学升达经贸管理学院资讯系,451191 [2]中南大学,长沙410075

出　　处：《微计算机信息》2007年第33期38-40,共3页Control & Automation

基　　金：国家自然科学基金项目(60173041)资助

摘　　要：针对基于口令的远程用户鉴别方案在时间戳和用户ID以及挑战/应答机制中的单相认证的上存在的脆弱性,采用指纹和智能卡双重认证技术,提出了挑战/应答机制的改进方案,该方案能进行双向认证,可抵抗重放攻击和假冒攻击,且由示证和认证双方共同生成随机因子,也体现了认证的公平性,认证过程不需要传递用户指纹信息,保护了用户的隐私,比较发现该方案是一种更安全、实用、简单、便捷的基于动态口令的远程双向认证方案。in view of exists fragile based on the password long-distance user distinction plan in the time stamp and user ID and as well as in challenge/reply mechanism single-way authentication,This paper propose an improved scheme based on chanllenge - response adopting diplex authentication technologies ,fingerprint and smart card .it could achieve mutual authentication and replay attack and masquerade attack .The random factor was generated by the mutual parties to guarantee the authentication fairness .Moreover user＇s fingerprint needed not be transmitted in the authentication process to protect user＇s privacy .It is a more secure and simple and practical and convenien remote double authtication scheme based on dynamic password.

关 键 词：智能卡 动态口令 指纹特征 身份认证 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]