智能卡用户认证方案的安全性分析  

Security analysis of smart card user authentication scheme

作　　者：殷小虹 Yin Xiaohong(Jiangxi Vocational College of Media,Nanchang 330224,China)

机构地区：[1]江西传媒职业学院,江西南昌330224

出　　处：《无线互联科技》2022年第22期166-168,共3页Wireless Internet Technology

摘　　要：云环境中资源限制型智能卡的使用会降低会话密钥协议的计算和通信代价,在这样的背景下,文章分析了多位研究者提出的认证协议存在关键信息泄漏对对手和中间人攻击的问题,通过研究Kim等提出的多种改进的基于身份的远程用户认证方案,证明了WenuridLis认证协议不能提供完美的前向保密性和用户匿名性,提出了一种构建分布式环境下属性基认证形式化安全模型的思路。The use of resource constrained smart cards in the cloud environment will reduce the computation and communication costs of the session key protocol. Under this background, the paper analyzes the problem that the authentication protocol proposed by many researchers has some key information leakage attacks on opponents and intermediaries. Through studying various improved identity based remote user authentication schemes proposed by Kim,It is proved that the WenuridLis authentication protocol cannot provide perfect forward secrecy and user anonymity, and an idea to build a formal security model of attribute based authentication in a distributed environment is proposed.

关 键 词：密钥协商 被盗验证者攻击 智能卡 用户匿名 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]