简单易行的S/KEY认证改进方案  

Simple improvement for S/KEY authorization scheme

作　　者：何冰[1] 

机构地区：[1]广西师范大学计算机科学与信息工程学院,广西桂林541004

出　　处：《计算机应用》2011年第4期996-998,共3页journal of Computer Applications

基　　金：广西师范大学青年教师科研基金资助项目(2007)

摘　　要：分析了传统S/KEY一次性口令(OTP)认证方案及现有的改进方案存在的缺陷与不足,提出了一种新的S/KEY认证改进方案。该方案以用户口令PW哈希值作为验证因子实现了双向认证,通过增加消息的完整性保护防止关键消息被伪造,并具备原有方案简单易行的特性,能有效抵御重放攻击、小数攻击和冒充攻击。The author analyzed some defects of the traditional S/KEY One-Time Password（OTP） authorization scheme and recent improvements,and proposed a new S/KEY improvement scheme.The new scheme provided mutual authorization with Hash values of user password as an authentication factor.It can effectively prevent key message from being forged by adding message integrity protection.The new scheme is as simple and easy to be implemented as traditional S/KEY scheme.Additionally,it can effectively avoid replay attack,small integer attack and impersonating attack.

关 键 词：一次性口令 身份认证 S/KEY认证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]