新的基于智能卡和指纹动态口令鉴别方案  

New dynamic password authentication based on smart card and fingerprint

作　　者：周伟[1] 赵立新[1] 

机构地区：[1]辽宁工程技术大学研究生院,辽宁阜新123000

出　　处：《微计算机信息》2011年第2期197-199,共3页Control & Automation

摘　　要：针对张金颍等人提出的动态口令方案,发现其存在服务器伪造攻击,蔡佳伦等人对此做出了改进,但发现其改进方案仍然存在服务器伪造攻击,而且原方案所采用的ElGamal算法的密钥长度会随着算法强度的增加而快速增加,鉴于此本文决定采用椭圆曲线密码体制代替原来的密码体制,并分析服务器伪造攻击的根源所在.本文首先首先给出了原方案,然后分析了其存在的问题,最后给出了新的方案和其分析.Zhang , etc. proposed a dynamic password scheme. It is found that the scheme was vulnerable to a server spoofing attack. And Cai, etc improve the scheme. But the there is also existence of spoofing attack. And the original proposal adopted ElGamal algorithm, whose key length will increased rapid as the intensity increased. In view of this, this paper decided to use elliptic curve cryptosystem instead of the original and alnalyze the root cause of the server forgery attack. So, in this paper, first given in the original proposal, and then analyzes its problems, Finally, the new program and its analysis.

关 键 词：服务器伪造攻击 椭圆曲线加密算法 EIGAMAL 身份认证 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]