一种适于受限资源环境的远程用户双向身份鉴别方案  

An Efficient Remote User Mutual Authentication Scheme for Resource-limited Environment

作　　者：方恩博[1] 刘嘉勇[1] 肖丰霞[1] 

机构地区：[1]四川大学信息安全研究所,四川成都610065

出　　处：《四川大学学报（工程科学版）》2011年第5期140-145,共6页Journal of Sichuan University (Engineering Science Edition)

摘　　要：针对计算资源受限环境下的远程用户身份鉴别问题,在分析一种基于智能卡的远程用户身份鉴别方案安全问题的基础上,通过引入二次散列函数和注册随机因子,提出一种更加安全高效的身份鉴别方案。安全性分析结果表明,所提出鉴别方案可解决原方案不能对抗离线口令猜测攻击和假冒攻击的脆弱性,同时保持了原方案计算代价低、可实现双向鉴别等特点,使在计算资源受限环境下的应用具有更好的安全性和实用性。Aiming at remote user authentication scheme with resource-limited environment,a smart card based password authentication scheme＇s security flaws were analyzed,and an efficient authentication scheme with better security strength was proposed by introducing quadratic hash function and registered random factor.The security analysis showed that the proposed scheme can solve the security problem of being vulnerable towards off-line password guessing and forgery attacks,meanwhile keeping the merits of original schemes,such as low computation cost and mutual authentication.The proposed scheme can achieve better performances in security and practical operations under resource-limited conditions.

关 键 词：身份鉴别 可修复性 智能卡 口令猜测攻击 

分 类 号：TP393.084[自动化与计算机技术—计算机应用技术]