一种基于智能卡和动态密码远程认证方案.pdfVIP

2010 Asia-Pacific Conference on Information Theory An Authentication Scheme Based on Smart Card and Dynamic Password 1 2 3 Jianbiao ZHANG , Bo LI , Zhipeng LI Beijing University of Technology College of Computer science and technology Beijing ，china 1. zjb@; 2. bj_libo@; 3. beyondlzp@126.Com Abstract: Authentication is one of the most important aspects in information security theory and tech- nology and it is mainly used to solve the operators corresponding of physical identity and digital identity. Due to still so many deficiencies in existing authentication systems, there are a mass of existing prob- lems to be solved .In this paper, based on the unique physical characteristics of smart card and dynamic password technology, the author proposes a kind of certification scheme. In the scheme, the author util- izes random numbers and dynamic password technology which is able to resist replay attacks while us- ing time stamps and man-in-the-middle attack effectively. Besides, it can ensure the session key to be fresh and confidential. The scheme can be easily embedded into the enterprise system to ensure the se- curity of the system. Through the application of this certification scheme to tax controlled business au- tomation management system, it can effectively improve the efficiency of authentication and can solve the problem of data transmission security. Keywords: Authentication; Smart Card; Dynamic Password; Random Number 一种基于智能卡和动态密码的远程认证方案 1 2 3 张建标 ，李波 李志鹏 ， 北京工业大学计算机学院 北京 中国 1