一种基于智能卡的新型双向认证方案

在远程认证中,主要采用的仍然是基于口令的认证方案。为了满足安全性的需求,许多基于智能卡的远程用户认证方案被提出,但绝大多数方案不支持用户对口令的自由选取和更改,且许多方案中需要存储核对表。提出了一种新型的双向认证方案并且分析了其安全特性。所述方案支持用户自由更改口令且无需表格,可以防止ID窃取、猜测攻击、中间人攻击、拒绝服务攻击等。

A New Mutual Authentication Scheme Based on Smart Card

Password-based authentication schemes are the most widely used technique for remote user authentication.To satisfy the greater need for security,many smart card-based remote user authentication schemes have been proposed.However,most of them fail to allow the users to choose and change their passwords at will because they need a table to verify the validity of the users' login.In this paper we present a new mutual authentication scheme using smart card and provide its security properties.It allows the users to choose and change their passwords freely,and does not need any verifier table.Besides,it is secure against ID-theft,and can resist guessing attacks,insider attacks and reply attacks.