基于动态ID的远程认证方案的改进.pdfVIP

2007 5 M ay 2007 33 5 Journal of Beijing Un iversity ofA eronautics and Astronautics Vol. 33 No15 ID 段晓毅 张其善 刘建伟 ( , 100083) : 智能卡由于具有低功耗安全计算和便携性的特点, 常常 用做身份认证终 端. 基于静态口令的认证方案不能由用户选择密钥并且需要在服务器保存 一个密钥表, 而基于 动态 ID的方案能解决这些问题. 提出了新的方案, 指出Liao-Lee-Hw ang方案中不能抗偷窃攻 击的缺点, 并在其基础上做了改进. 新的改进方案不仅继承了原方案中抗猜测攻击实现共同 认证服务器不会泄露用户密钥的的优点, 同时也避免了窃取攻击; 并且新的改进方案在计算 量上也小于L iao-Lee-Hw ang的方案. : 认证; 智能卡; 密钥; 偷窃攻击 : TN 918 : A : 1001-59 5( 2007) 05-05 5-03 mI p roved security enhancement fo r a dynam ic ID-based remote use r authentication scheme Duan X iaoyi Zhang Q ishan L iu Jianw ei ( Schoo l ofE lectronics and Inform ation Eng ineering, Beij ing University ofAeronautics and Astronautics, Beijing 100083, China) A bstract: Smart cards are secure, compact and intelligent data carriers, wh ich can offers strong authent-i cation and guaranteed non- repud iation. W ith the traditional authentication solution, the static password is rarely altered andmaintained in the verifier table on the server. Th is is bringing forth the mi portant attacks of replay attacks, guessing attacks, modication attacks, and stolen-verier attacks. How ever, the dynam ic ID- based authentication solution can solve the problem. I-En L iao et al proposed a dynam ic ID-based user authen- tication scheme using sm art cards. The scheme has a lot of advantages, such as avoid ing a variety of attacks, mutual authentication and no verifier table, but it canct resist to stolen attack. A mi proved schemew as presen- ted to remedy theirw eaknesses. Comparew ith Liao-Lee-Hw angcs scheme, the mi proved scheme not only avoid stolen attacks but also reduce the computational costs. K