采用阈下信道的两方口令认证密钥交换协议  

Two-Party Password-Authenticated Key Exchange Protocol Based on the Subliminal Channel

作　　者：项顺伯[1] 赵晶英[2] 柯文德[1] 

机构地区：[1]广东石油化工学院计算机与电子信息学院,广东茂名525000 [2]广东石油化工学院机电工程学院,广东茂名525000

出　　处：《华侨大学学报（自然科学版）》2014年第6期665-668,共4页Journal of Huaqiao University(Natural Science)

基　　金：国家自然科学基金资助项目(61272382);广东省自然科学基金资助项目(S2012010009963);广东省茂名市科技计划项目(20130350)

摘　　要：提出一种基于阈下信道的两方口令认证密钥交换协议.协议中,服务器存储用户口令的验证值抵御服务器泄漏伪装攻击,用户的口令明文采用阈下信道生成签名信息传送给服务器,服务器计算出用户的口令明文恢复出阈下信息,再计算口令验证值以实现对用户身份的认证,从而建立起会话密钥.对所提协议的安全性和效率进行分析,结果表明:所提出的协议安全可行且有效.A two-party password-authenticated key exchange protocol based on the subliminal channel was proposed.In the proposed protocol,the server stores the user′s password verifier to withstand the server′s compromise and guise attacks,the user′s password cleartext is made to a signature message with the subliminal channel to transmit to the server, the server computes the user′s password cleartext to renew the subliminal message,then the server calculates the pass-word verifier to authenticate the user′s identity,so a session key is made between the server and the user.The security and the efficiency of the proposed protocol were analyzed,it shows in the analysis that the proposed protocol is secure and effective.

关 键 词：阈下信道 口令认证密钥交换协议 口令验证值 会话密钥 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]