基于动态ID的多服务器认证密钥协商方案

讨论了Chuang等人最近提出的一个基于可信计算的匿名多服务器认证密钥协商方案,指出其不能抵抗内部攻击,且在生物验证上存在Hash函数问题.通过引入椭圆曲线公钥密码和对称加密算法,提出了一个新方案并对其进行分析.分析结果表明,新方案弥补了原方案的不足,且具有较高的效率.最后,用一种改进的BAN逻辑证明了新方案满足密钥协商的正确性、密钥机密性和强认证性.

Negotiation Scheme of Multi-Server Authenticating Key Based on Dynamic ID

Recently Chuang et al. proposed an anonymous multi-server authenticating key negotia- tion scheme based on trust computing using smart cards and biometrics. However, it is found that their scheme is vulnerable to insider attacks, and it has the Hash function problem in the biometric verification. Therefore, this paper presents an improved scheme by introducing the elliptic curve key cryptography and symmetrical encryption. Security and performance analysis indicate that the new scheme eliminates the defects of Chuang et al. ＇ s scheme while keeping the high performance. Be- sides, the security of the improved scheme is proved by using the formal analysis method of an im- proved BAN logic. The results show that the improved scheme can ensure the correctness of key a- greement, key confidentiality and strong authentication.