一种更安全的基于智能卡的多服务器身份认证方案研究

发布时间：2018-07-05 05:56

  本文选题：多服务器 + 身份认证　； 参考：《计算机应用研究》2017年11期

【摘要】：随着网络和通信技术的发展,多服务器的身份认证问题成为近几年研究的重点。针对Chuang等人提出的基于生物特征的多服务器密钥认证方案存在的安全性不足等问题,Wang等人进行了改进,但是仍未解决不同服务器密钥相同造成的恶意攻击和伪造攻击等问题。因此,提出了一种更安全的基于智能卡的多服务器身份认证方案。该方案在服务器注册阶段,将高熵秘密数与服务器的ID进行计算再重新分配给服务器,使得不同的服务器具有不同的密钥。最后通过五个方案功能和性能比较分析,得出改进方案比前三种方案时间上分别缩短了16.67%、20%、28.57%,且能有效阻止恶意服务器攻击、伪造攻击、重放攻击和中间人攻击等多种攻击,安全性得到了提高,满足实际网络的高可靠性需求。
[Abstract]:With the development of network and communication technology, multi-server identity authentication has become the focus of research in recent years. In order to improve the security of Chuang et al.'s biometric-based multi-server key authentication scheme, Wang et al has improved it, but it has not solved the problem of malicious attack and forgery attack caused by the same key of different servers. Therefore, a more secure multi-server authentication scheme based on smart card is proposed. In the stage of server registration, the high entropy secret number and the ID of the server are calculated and redistributed to the server, which makes different servers have different keys. Finally, by comparing and analyzing the function and performance of the five schemes, it is concluded that the improved scheme can shorten 16.67 times compared with the previous three schemes, and can effectively prevent the malicious server attack, forgery attack, replay attack and man-in-the-middle attack, and so on, and can effectively prevent the attack, such as malicious server attack, forgery attack, replay attack and man-in-the-middle attack, etc. The security is improved to meet the high reliability requirements of the actual network.
【作者单位】： 首都师范大学信息工程学院;首都师范大学北京市电子系统可靠性与故障预测联合研究中心;首都师范大学北京市电子系统与集成电路设计联合实验室;
【基金】：国家自然科学基金资助项目(61202027) 北京市属高等学校创新团队建设与教师职业发展计划资助项目(IDHT20150507)
【分类号】：TP309;TP368.5
，

本文编号：2099199