一种基于公钥体制的双向认证及密钥协商方案  

A Scheme of Mutual Authentication and Key Agreement which is Based on Public Key System and can Assure Identity Security

作　　者：杨栋[1] 谢永强[1] 

机构地区：[1]解放军理工大学指挥自动化学院,江苏南京210007

出　　处：《计算机安全》2008年第1期25-28,共4页Network & Computer Security

摘　　要：该文首先分析了目前常用的几种成熟的身份认证方案各自的优缺点,然后以公钥体制和挑战/应答认证机制为基础,设计了一种新的身份认证方案。该方案将静态口令机制和动态口令机制相结合,不仅能确保用户的身份安全,实现通信双方的相互认证,而且在认证同时能够完成双方会话密钥的协商。最后,文章对方案的安全性和有效性进行了分析。The paper first analyses some familiar schemes of identity authentication which is mature and widely used nowadays, and compares their respective advantages and disadvantages. Then it designs a new identity authentication scheme, which is based on public key system and challenge/response mechanism. The scheme combines static password mechanism with dynamic password mechanism. It not only can assure identity security and implement the mutual authentication of the two communication entities, but also can accomplish session key agreement. In the end, the paper gives an analysis about the security and effectiveness of the authentication scheme.

关 键 词：公钥 挑战/应答 身份安全 双向认证 密钥协商 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TN918.1[自动化与计算机技术—计算机科学与技术]