基于智能卡远程用户匿名身份认证和密钥协商方案.docVIP

基于智能卡远程用户匿名身份认证和密钥协商方案 　　摘 要: 　　 　　分析了Li??Niu等(LI X, NIU J W, KHAN M K, et al. An enhanced smart card based remote user password authentication scheme［J］. Journal of Network and Computer Applications, 2013, 36(5):1365-1371.)基于智能卡的远程用户登录认证方案，指出了方案中存在的安全性问题，并提出了改进方案。新方案利用一种自认证的时间戳技术，与对称加密技术相结合，解决了多数智能卡方案中存在的时钟同步问题。与Li??Niu方案相比，新方案不仅可以提供用户的匿名登录，而且能够抵抗扮演攻击和内部攻击,适用于复杂的网络环境。 　　?ス丶?词:认证；智能卡；密码学分析；密码 　　 　　 　　?ブ型挤掷嗪?: TP393.08 　　 　　文献标志码:A 　　英文标题?? 　　 　　Anonymity??preserving remote user password?? 　　 authentication with key agreement scheme based on smart cards 　　?び⑽淖髡呙? 　　 　　 　　LIU Sha????1??*??，ZHU Shuhua????2,3?? 　　?び⑽牡刂?( 　　 　　 　　1.School of Information Science and Technology, Jinan University, Guangzhou Guangdong 510632, China??;???? 　　2.School of Information Science and Technology, Sun Yat??Sen University, Guangzhou Guangdong 510006, China??;???? 　　3.Network and Educational Technology Center, Jinan University, Guangzhou Guangdong, 510632, China 　　 　　英文摘要)?? 　　Abstract: 　　 　　The paper firstly analyzed some security problems in Li??Niu??s (LI X, NIU J W, KHAN M K, et al. An enhanced smart card based remote user password authentication scheme［J］. Journal of Network and Computer Applications, 2013, 36(5):1365-1371.) enhanced smart card based remote user password authentication scheme, and then proposed a novel smart??card??based scheme. In new scheme, a self??verified timestamp technique was combined with symmetric encryption methods to solve the problem of implementing clock synchronization in most typical smart??card??based schemes. Compared with Li??Niu??s scheme, this scheme can not only provide the users?? anonymity, but also resist the impersonation attacks and the privileged insider attacks. The scheme is more secure and efficient for the complicated network environment. 　　 　　英文关键词??Key words: 　　 　　authentication; smart??card; cryptanalysis; password?? 　　 　　 　　 　　0 引言?? 　　随着现代通信手段的快速发展，关于怎样安全而高效地实现用户与远程服务器在不安全网络环境下的双向认证，已经成为网络安全