非模逆椭圆曲线数字签名认证协议  

No-Modular Inverse Elliptic Curve Digital Signature Protocol Based Authentication Protocol

作　　者：张利华[1,2] 谢平[3] 吕善伟[1] 

机构地区：[1]北京航空航天大学电子信息工程学院,北京海淀区100083 [2]华东交通大学电气与电子学院,南昌330013 [3]华东交通大学基础科学学院,南昌330013

出　　处：《电子科技大学学报》2007年第S2期1117-1120,共4页Journal of University of Electronic Science and Technology of China

基　　金：国家自然科学基金(60271012)

摘　　要：给出了一个无需求模逆的椭圆曲线签名算法;利用该算法构造了一个远程用户认证协议——NECSA协议,其安全性基于单向Hash函数和椭圆曲线离散对数计算的困难性。该协议具有以下特点:允许用户自主选择并更改口令,实现了双向认证;能够抵御中间人攻击,抗DOS攻击;具备前向安全性、强安全修复性和"黑名单"拒绝服务机制,是一个低开销的、安全的远程用户认证协议。A no-inverse elliptic curve digital signature scheme is presented in this paper.A novel remote user authentication protocol-GECSA,which is based on the no-inverse elliptic curve signature and has no inverse operation,is also proposed.The security of the protocol relies on Hash function and the discrete logarithm problem over the points on the elliptic curve,the protocol has many merits:it let users freely choose and change password at their own will;it provides mutual authentication between two entities;in addition,it has lower computational costs, it resists man-in-middle attack and denial of service attack;it has forward security and strong security reparability. Furthermore,it has black list eviction mechanism.Overall,the proposed protocol is a better protocol with lower cost and strong security.

关 键 词：非模逆 口令 智能卡 用户认证 

分 类 号：TN918[电子电信—通信与信息系统]