一种增强的智能卡口令鉴别方案  

An Enhanced Remote User Authentication Scheme with Smart Cards

作　　者：陈剑[1] 刘嘉勇[1] 李娟[1] 

机构地区：[1]四川大学电子信息学院,四川成都610065

出　　处：《信息安全与通信保密》2013年第11期93-96,共4页Information Security and Communications Privacy

摘　　要：分析了zhang等提出的身份鉴别方案,指出了其不能抵抗离线口令猜测攻击,以及在登录阶段和验证阶段存在设计缺陷等问题。然后在保留其优点的基础之上.通过引入随机数和增加登录请求信息的方法,提出了一种更加安全可靠的口令认证协议方案。安全性分析结果表明,该方案能够有效抵抗离线口令猜测攻击和假冒攻击,可以实现双向鉴别等特点,增强了系统的安全性和实用性。The authentication scheme proposed by Zhang et al. is analyzed, its vulnerability to offline password-guessing attack pointed out, including its design defect in the login phase and validation phase. And then by introducing the random number and increasing the login request information, an improved re- mote user password authentication protocol with better security strength is proposed. The security analysis shows that the improved scheme could resist offline password-guessing and impersonation attacks, achieve mutual authentication and enhance the safety and practicality of the system.

关 键 词：身份鉴别 智能卡 口令猜测攻击 安全性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]