基于改进Elgamal数字签名的智能卡双向认证方案  

A smart card mutual authentication based on improved Elgamal digital signature

作　　者：屈永斌 王海燕 QU Yong-bin;WANG Hai-yan(Shaanxi Post and Telecommunication College,Xianyang 712000,Shaanxi Province,China)

机构地区：[1]陕西邮电职业技术学院,陕西咸阳712000

出　　处：《信息技术》2021年第8期112-116,121,共6页Information Technology

摘　　要：已有Elgamal远程双向认证方案缺乏密钥协商机制,用户无法自由更改密钥,且难以抵御多种攻击,不适合应用于安全性要求很强的智能卡认证场合。针对此问题,提出了一种改进Elgamal远程双向认证方案。改进方案为用户和服务器提供了安全性强的双向认证机制和密钥协商机制,用户可以自由更改密钥,具有前后向保密性,且可以抵御智能卡丢失攻击、重放攻击、密钥猜测攻击、内部攻击、伪造攻击和并行会话攻击。理论分析和仿真实验表明,改进方案具有良好的安全性和较低的计算复杂度。Traditional Elgamal based remote mutual authentication scheme lacks key agreement mechanism,and is hard to withstand many kinds of attacks.Moreover,users cannot update their password freely.Based on these problem,an improved Elgamal based remote mutual authentication scheme is proposed.The improved scheme provides strong security mutual authentication and key agreement which ensures forward and backward secrecy,and can withstands lots of attacks such as the smart-card-loss-attack,the replay attack,the off-line guessing attack,the insider attack,the impersonation attack and the parallel session attack.Furthermore,users can update their passwords freely.Theoretical analysis and simulation experiments show that improved scheme has good security and low computation complexity.

关 键 词：智能卡 ELGAMAL数字签名 双向认证 高安全性 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]