对称密钥结合椭圆曲线加密的网络认证和密码更新方案  

Network authentication and password update program based on elliptic curve cryptography and symmetric key

作　　者：孙波[1] 魏勇[1] 王宏伟[2] Sun Bo;Wei Yong;Wang Hongwei(Dept,of Computer Science & Technology,Henan Mechanic & Electric Engineering College,Xinxiang Henan 453003,China;School of Computer Science & Technology,Huazhong University of Science & Technology,Wuhan 430074,China)

机构地区：[1]河南机电高等专科学校计算机科学与技术系,河南新乡453003 [2]华中科技大学计算机科学与技术学院,武汉430074

出　　处：《计算机应用研究》2016年第10期3094-3098,共5页Application Research of Computers

基　　金：国家自然科学基金资助项目(70890081);河南省教育厅科学技术研究重点资助项目(13A520221;14A520045)

摘　　要：针对不稳定网络环境下的远程登录管理不能有效进行安全密码认证和密码更新的问题,提出一种对称密钥结合椭圆曲线加密(elliptic curve cryptography,ECC)的网络认证和密码更新方案。其主要贡献在于弥补现有方案的一些漏洞,并给出改进方案。新方案包含注册、口令认证、密码更新和会话密钥分发四个阶段,提供对密码猜测攻击、服务器欺骗攻击、数据窃听、重放攻击的防御。此外,提出的方案可产生一个通用对称密钥,相比公钥加密技术,所需处理时间更少。实验结果显示,该方案的虚拟计算时间仅为2.000 35 s,只在17哈希、8异或和4点运算方面需要计算开销。As the remote login management in unstable netw ork en vironm ent can not effectively secure password au then ticationand password u p d a tin g , this paper proposed netw ork au then tication and password replacem ent program using sym m etric key accelerationand the e llip tic curve cryptography ( E C C ) . The m ain co n trib u tio n was to make up some o f the loopholes in the e x istingprogram s, and gave im provem ents. The new program consisted o f fo u r phases: registration phase, password au then tication phase, password update phase and session key d is trib u tio n ph ase, p ro vid in g defense o f password guessing a tta c k s , serverspoofing a tta cks, data in te rce p tio n attacks and replay attacks. A lso the proposed scheme can produce a common sym m etrick e y , com pared to p u b lic -k e y encryption technology com pared, and the re quire d processing tim e is less. The v irtu a l com putingtim e is 2 .0 0 0 35 seconds, on ly in c lu d in g the cost o f 17 tim es hash, 8 tim es X O R and 4 tim es dot operation in total.

关 键 词：密码认证 椭圆曲线加密 对称密钥 虚拟计算 重放攻击 密码更新 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]