基于单向哈希函数的远程口令认证方案  

New remote password authentication scheme based on one-way hash function

作　　者：薛素静[1] 孔梦荣[2] 

机构地区：[1]华北水利水电学院信息工程系,郑州450008 [2]中原工学院计算机科学系,郑州450007

出　　处：《计算机应用研究》2008年第2期512-515,共4页Application Research of Computers

基　　金：国家自然科学基金资助项目(60472022);河南省科技厅软科学课题资助项目(0313025300,0313033100)

摘　　要：首先分析了Wu-Chieu认证方案和Lee-Lin-Chang认证方案存在的安全缺陷;然后提出了一种基于单向哈希函数和Diffie-Hellman密钥交换协议的远程口令认证方案。该认证方案不仅修正了上述两种认证方案存在的安全缺陷,而且实现了用户与远程系统之间的双向认证。由于该认证方案不要求用户与远程系统之间维护时间同步机制,更适用于大规模分布式网络环境。This paper firstly demonstrated the security problems of the Wu-Chieu improved authentication scheme and LeeLin-Chang authentication scheme. Then, a new authentication scheme based on a one-way hash function and Diffie-HeUman key exchange was presented. This scheme not only could isolate such problems of the existing two schemes, but also could provide mutual authentication between the user and the remote system. Additionally, because the scheme did not require time synchronization between the user and the remote system, it was more applicable to various distributed network environment.

关 键 词：认证 口令 智能卡 

分 类 号：TP391.1[自动化与计算机技术—计算机应用技术]