一个基于智能卡的动态认证方案  

Dynamic authentication scheme using smart card

作　　者：李毅[1] 张少武[1] 曾立君[1] 韩继红[1] 

机构地区：[1]信息工程大学电子技术学院,郑州450004

出　　处：《计算机应用》2008年第3期637-639,共3页journal of Computer Applications

基　　金：现代通信国家重点实验室基金资助项目(51436020405JB5205)

摘　　要：讨论了2006年袁丁等人设计的简单高效的口令识别方案(SEPA),指出该方案无法抵御字典攻击、中间人攻击和服务器拒绝服务攻击。提出了一个基于智能卡的动态认证方案,并对其进行了分析,结果表明新方案提供双向认证,安全性高,运算量低,具有安全、友好、方便的口令更新方式,并且服务器不需维护用于认证的验证表。This article discussed an authentication scheme recently advanced by Yuan Ding et al, and indicated that the scheme was vulnerable to dictionary attack, man-in-the-middle attack and denial-of-service attack to the server. And then a dynamic authentication scheme using smart card was proposed and analyzed. The analysis shows that the proposed new scheme, which provides mutual authentication, has the properties of high security and low computational cost, and that it supplies secure, friendly and convenient password-change phase and the server of the scheme does not need to maintain the verification tables used to help authentication.

关 键 词：动态认证 双向认证 智能卡 口令 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]