一种新型的基于口令和生物特征的双因子认证与密钥协商协议

发布时间：2018-03-20 20:04

本文选题：认证与密钥协商　切入点：生物认证　出处：《宏观经济管理》2017年S1期 　论文类型：期刊论文

【摘要】：传统的基于口令和智能卡的双因子认证与密钥协商协议中,若智能卡丢失则会给用户带来安全性和便捷性上的问题。针对该问题,提出了一个新型的基于口令和生物特征的双因子认证与密钥协商协议。该双因子协议利用用户的生物特征以及口令信息实现安全通信,用户无需携带智能卡。通过服务器的公钥保护用户的生物特征以及口令信息,避免了基于口令的认证协议所可能遭受的离线字典攻击。攻击者获得任何一个单一认证因子(口令或者生物特征)都不能破坏协议的安全性。利用AVISPA协议分析工具,通过仿真验证了协议的安全性。性能分析表明协议可以实现用户快速安全认证,适用于下一代互联网中用户认证。
[Abstract]:In the traditional dual-factor authentication and key agreement protocol based on password and smart card, if the smart card is lost, it will bring security and convenience to the user. A new two-factor authentication and key agreement protocol based on password and biometrics is proposed, which utilizes the biometrics of users and password information to realize secure communication. Users do not need to carry smart cards. Protect the user's biometric and password information through the server's public key. Avoid the possible offline dictionary attack on password-based authentication protocol. No single authentication factor (password or biometric) can break the security of the protocol. The security of the protocol is verified by simulation, and the performance analysis shows that the protocol can realize the fast and secure authentication of users, and it is suitable for the next generation Internet user authentication.
【作者单位】：河南省三门峡职业技术学院信息传媒学院;
【分类号】：TP309

【相似文献】