基于口令和智能卡的双因素身份认证与盲云存储方案  

Two-factor Authentication Scheme for Blind Cloud Storage System Based on Password and SmartCard

作　　者：王怡 胡学先 魏江宏 WANG Yi;HU Xuexian;WEI Jianghong(PLA Strategic Support Force Information Engineering University,Zhengzhou 450001,China)

机构地区：[1]中国人民解放军战略支援部队信息工程大学,郑州450001

出　　处：《计算机科学》2024年第1期363-370,共8页Computer Science

基　　金：国家自然科学基金(62172433,62172434);河南省自然科学基金(222300420099)。

摘　　要：面向大规模用户数据的存储需求,如何安全地使用云存储技术实现用户数据的远程存取,同时保证数据的可移植性和安全性是当前的一个研究热点。在2022年的USENIX Security会议上,Chen等针对用户仅拥有一个低熵口令的情形,提出了一种高效可移植的盲云存储方案,然而该方案不可避免地继承了口令难以抵抗在线字典攻击的弱点。为弥补单一口令认证方式带来的安全性缺陷,文中提出了一种基于口令和智能卡的双因素身份认证与盲云存储方案。安全性分析和仿真实验结果表明,该方案在保证良好的可移植性、可部署性和盲云存储特性的同时,实现了比纯口令方案更高的安全性,且具有相当的计算和通信效率。Aiming at the demand for large-scale data storage,how to securely realize remote access to user data using cloud sto-rage technologies while retaining data portability and security is a research hotspot at present.In USENIX Security 2022,Chen et al.proposed an efficient and portable blind cloud storage scheme for the case where users just hold one low-entropy password.However,the scheme inevitably inherits the weakness of passwords unresistant to online dictionary attack.To compensate the security shortage of password-only authentication,this paper designs a two-factor authentication scheme for blind cloud storage system based on password and smart card.Experimental results show that the proposed scheme not only realizes portability,deployability and blind cloud storage,but also achieves a higher level of security over password-only authentication schemes with equivalently computation and communication efficiency.

关 键 词：智能卡 低熵口令 身份认证 双因素 盲云存储 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]