无线双向安全认证系统的设计与实现  

Design and realization of two-way security authentication wireless system

作　　者：王杰华[1] 刘会平[1] 邵浩然[1] 夏海燕[1] 

机构地区：[1]南通大学计算机科学与技术学院,江苏南通226019

出　　处：《计算机工程与设计》2016年第10期2639-2643,2699,共6页Computer Engineering and Design

基　　金：国家自然科学基金面上基金项目(61170171);江苏省"六大人才高峰"基金项目(2010-WLW-006);江苏省高校科研成果产业化推进基金项目(JHB2011-45);南通大学研究生创新基金项目(YKC14018)

摘　　要：为确保无线环境下多用户与服务器的正确连接,设计实现一种无线双向安全认证系统,该系统能稳定有效地运行于实际环境中。通过使用Hash函数对用户认证信息进行加密的方式,确保信息传输安全,对用户进行匿名保护;利用计数器替代时间戳来验证消息的有效性,解决众多设备网络时间同步困难的问题,避免无线网络中重放攻击的危险。运算量以及运算时间的对比分析表明,相比其它方法,该系统具有运算量较少、运行时间较短的优点,能有效提高该系统在实际使用中的认证效率。To ensure the users＇ correct connections with the servers,a two-way security authentication wireless system was designed and realized.The proposed system ran stably and effectively in real environment.The Hash function was used to encrypt the user authentication information,the system could ensure not only the safety of information transmission but also the anonymous protection of users.The counter was used instead of timestamp to verify the information effectiveness,and the difficult time synchronization problem for equipment was solved,and the risk of replay attacks was avoided in wireless networks.The analysis of computation complexity and operation time shows,compared to other methods,the proposed system has the advantages of less computational complexity and shorter operation time.It can effectively improve the efficiency of certification in the practical operation.

关 键 词：双向认证系统 HASH函数 计数器 伪装攻击 离线口令猜测攻击 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]