改进的基于USBKey的动态身份认证方案  

An improved dynamic authentication scheme using USBKey

作　　者：刘怀兰[1] 侯昕[1] 王佳[1] 

机构地区：[1]华中科技大学机械科学与工程学院,湖北武汉430074

出　　处：《华中科技大学学报（自然科学版）》2010年第11期41-43,共3页Journal of Huazhong University of Science and Technology(Natural Science Edition)

摘　　要：分析了现有的基于动态口令的身份认证协议的安全性隐患,指出了其中的不足.在此基础上提出了一种改进的身份认证方案,以USBKey作为载体,利用ELGamal公钥密码体制,采用挑战-应答形式并结合单向哈希函数,避免了需要时钟同步带来的潜在威胁,实现了双向认证,防止假冒攻击、口令攻击和重放攻击.Based on dynamic password, the security of current remote user authentication scheme is analyzed. The security risk is pointed out. For the existing potential defects among the current scheme, an improved dynamic authentication mechanism is put forward. This plan has combined ELGamal＇s private key cryptosystem, challenge-response mechanism and one way Hash function, meanwhile it has used USBKey as the vector. Analysis show that this kind of improved authentication mechanism has avoid the potential security risks caused by clock synchronization, it can against disguised attack, dictionary attack and replay attack, and also mutual authentication is achieved.

关 键 词：身份认证 动态口令 ELGamal公钥密码体制 挑战一应答 单向哈希函数 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]