对一种基于口令和时间限制的用户身份认证协议的改进  

Improvement of Time-bound and Password-based User Authentication Protocol

作　　者：叶俊[1] 付宇[1] 

机构地区：[1]四川理工学院理学院,四川自贡643000

出　　处：《四川理工学院学报（自然科学版）》2011年第4期410-412,共3页Journal of Sichuan University of Science & Engineering(Natural Science Edition)

摘　　要：电子商务的应用越来越广泛,高效且安全的电子商务协议研究是近期研究的热点。对Iuon-Chang Lin等提出的的基于口令和时间限制的用户身份认证的电子商务应用协议进行了分析。此协议的口令计算是基于模平方根难解问题的,但是此阶段的方案存在漏洞并且运算效率低。对此提出了基于Hash链的改进方案,并且对新方案进行了安全性分析,此方案解决了原文献方案的漏洞并且比原文献中的方案更加高效和安全。Electronic commerce is widely used now,and the resent research focus on the efficiency and security of electronic commerce protocols.A countable and time-bound password-based user authentication scheme for the electronic commerce promoted by Iuon-Chang Lin and Chin-Chen Chang is discussed.User＇s password of the protocols is based on the hard problem modular square root.However,there＇s a bug in this scheme,and the efficiency of the scheme is low.A new scheme based upon Hash chain is advanced,and its security is discussed.The new scheme has solved the bug in the original scheme,and it is more efficient and safer.

关 键 词：协议 HASH函数 安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]