无双线性对的动态口令认证与密钥协商方案.PDFVIP

2017 年 软 件 2017,V 〇1.38,No. 7 第 38 卷 第 7 期_____________________ COMPUTER ENGINEERING SOFTWARE_____________________ 国际 IT 传媒品牌 I 金项玛办文 无双线性对的动态口令认证与密钥协商方案 马立林 ， 王侃民 (九江学院，信息技术中心，九 江 332 〇05) 摘 要 ：提 出了一种椭圆曲线密码体制下基于身份的双向认证方案，用于解决基于移动终端的动态口令机制身 份认证方案在双向认证和会话密钥方面的不足。该方案使用移动端令牌生成动态口令，采用三次握手原理实现身份 认证，支持安全会话密钥协商、一次性口令、双向认证和轻量级服务器存储。分析表明，该方案可以抵抗针对移动 终端口令认证方案的常见攻击，安全有效，满足安全设计目标。 关键词：椭圆曲线密码体制；身份认证；密钥协商；一次性口令；双向认证 中图分类号：TP309.7 文献标识码： A DOI: 10.3969/j.issn.l003-6970.2017.07.009 本文著录格式：马立林，王侃民.无双线性对的动态口令认证与密钥协商方案[ J ] . 软件，2017, 38 (7): 35-38 Dynamic Password Authentication and Key Agreement Scheme Without Bilinear Pairing MA Li-lin, WANG Kan-min {Information Technology Center, Jiujiang University, Jiujiang 332005, China) Abstract【 】：For solving the problem of dynamic password authentication scheme based on mobile terminal in mutual authentication and session key , an identity based mutual authentication scheme on elliptic curve cryptogra- phy is proposed . The scheme uses the mobile terminal token to generate a dynamic password and the three hand - shake principle to achieve the identity authentication . It supports secure session key agreement , one-time password ， mutual authentication and lightweight server storage . The analysis shows that the scheme can resist the common at- tacks against password authentication scheme for mobile teminal , security and efficiency , and meet the security sign target . 【 Key words 】：Elliptic curves ctyptography ; Identity authentication ; Key agreement ; One-time pssword ; Mutual authentication 广泛的应用[1]。1981年，Lamport [2]首先提出了利用 0 引言 杂凑函数对用户口令进行简单的加密处理，拟提高