一种基于公钥体制的双向认证及密钥协商方案

该文首先分析了目前常用的几种成熟的身份认证方案各自的优缺点,然后以公钥体制和挑战/应答认证机制为基础,设计了一种新的身份认证方案。该方案将静态口令机制和动态口令机制相结合,不仅能确保用户的身份安全,实现通信双方的相互认证,而且在认证同时能够完成双方会话密钥的协商。最后,文章对方案的安全性和有效性进行了分析。

A Scheme of Mutual Authentication and Key Agreement which is Based on Public Key System and can Assure Identity Security

The paper first analyses some familiar schemes of identity authentication which is mature and widely used nowadays, and compares their respective advantages and disadvantages. Then it designs a new identity authentication scheme, which is based on public key system and challenge/response mechanism. The scheme combines static password mechanism with dynamic password mechanism. It not only can assure identity security and implement the mutual authentication of the two communication entities, but also can accomplish session key agreement. In the end, the paper gives an analysis about the security and effectiveness of the authentication scheme.