多服务器环境下的匿名认证机制研究

发布时间：2018-02-27 05:09

本文关键词： 多服务器环境智能卡匿名认证隐私保护　出处：《暨南大学》2016年硕士论文　论文类型：学位论文

【摘要】：随着网络的迅速发展以及广泛应用,对多服务器环境下的网络服务需求也快速增长,但多服务器环境下的安全问题已成为制约网路服务进一步发展和应用的一个重要因素。而身份认证作为多服务器服务的第一道安全保障,显得尤为重要。此外,用户在使用多服务器网络服务时,最担心自己的隐私信息被泄露。因此,在多服务器环境下,研究建立一个匿名认证机制是十分必要和急需的。论文研究了多服务器环境下的匿名认证机制,主要工作如下:分析了Ravi等人的多服务器环境下的智能卡认证方案,指出该方案中存在拒绝服务攻击、智能卡攻击和不能实现完全匿名认证等缺陷。针对这些缺陷,基于该方案提出了一个改进方案。改进的方案能实现用户只需注册一次,就可以访问多个服务器,且服务器无需存储任何用户信息,并通过采用随机掩蔽技术,实现了完全匿名认证。安全性分析表明,改进的方案不仅能实现Ravi等人方案原有的安全性,而且能够抵抗拒绝服务攻击和智能卡攻击,克服Ravi等人方案的缺陷。通过BAN逻辑证明了改进方案的有效性。性能分析表明,改进方案的计算费用和传输费用都优于Ravi等人的方案。基于改进的方案,利用Docker容器虚拟技术模拟了一个多服务器环境,并在此环境下构建了一个匿名认证仿真系统,验证了改进方案的正确性和可行性。
[Abstract]:With the rapid development and wide application of network, the demand for network services in multi-server environment is also growing rapidly. However, the security problem in multi-server environment has become an important factor restricting the further development and application of network services. As the first security guarantee of multi-server services, identity authentication is particularly important. When users use multi-server network services, they are most worried that their privacy information will be leaked. Therefore, in a multi-server environment, It is very necessary and urgent to establish an anonymous authentication mechanism. This paper studies the anonymous authentication mechanism in multi-server environment. The main work is as follows: the smart card authentication scheme in multi-server environment of Ravi et al is analyzed. It is pointed out that there are some defects in the scheme, such as denial of service attack, smart card attack and complete anonymous authentication. In view of these defects, an improved scheme based on this scheme is proposed. Multiple servers can be accessed, and the server does not need to store any user information. By using random masking technology, complete anonymous authentication is realized. The security analysis shows that, The improved scheme can not only realize the original security of Ravi et al., but also resist the denial-of-service attack and smart card attack, and overcome the shortcomings of Ravi et al. The validity of the improved scheme is proved by BAN logic. The computational cost and transmission cost of the improved scheme are superior to those of Ravi et al. Based on the improved scheme, a multi-server environment is simulated by using Docker container virtual technology, and an anonymous authentication simulation system is constructed in this environment. The correctness and feasibility of the improved scheme are verified.
【学位授予单位】：暨南大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP393.08

【相似文献】