改进的基于智能卡的远程异步认证协议  

Improved remote asynchronous authentication scheme with smart card

作　　者：皮兰 武传坤[1] 

机构地区：[1]中国科学院信息工程研究所信息安全国家重点实验室,北京100093 [2]中国科学院大学,北京100190

出　　处：《计算机工程与应用》2014年第8期61-65,89,共6页Computer Engineering and Applications

摘　　要：远程认证协议允许远程服务器和用户通过不安全信道实现相互认证。唐宏斌等指出Chen等方案的基于智能卡的远程认证协议存在着一些安全问题,如丢失智能卡攻击,重放攻击等,并且提出一种基于智能卡的远程认证协议,为了抵抗重放攻击而引入时间戳机制。提出一种改进的基于智能卡的远程异步认证方案,在能抵抗提到的所有攻击条件下,不需要考虑时钟同步问题而能抵抗重放攻击,使操作更简单且未增加计算性能代价。Remote authentication scheme allows a remote server and the user to realize mutual authe-ntication through the unsafe channel. Tang Hongbin et al claim that there are some security problems in Chen et al’s scheme, such as loss of smart card attack, replay attack, etc. It proposes an improved remote authentication scheme based on smart card. But Tang Hongbin et al introduce timestamp mechanism to resist replay attack. This paper proposes a remote asynchronous authenti-cation scheme based on smart card. The scheme doesn’t need to sonsider clock synchronization and can resist all men-tioned attacks, operation is easier and the performance cost is not increased.

关 键 词：异步 认证协议 智能卡 椭圆曲线离散对数问题 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]