一种远程通行字双向认证方案

应用GF(P)上的代数运算和单向函数,构造了一种不用通行字表的远程通行字双向认证方案,并对该方案进行了安全性分析和计算特性分析。在该方案中,系统可对来访的用户进行认证,用户也可以对系统的真实性进行认证;用户可以自己选择通行字,入侵者不能导出任何用户的通行字和任何保密信息,该方案能抵御重试攻击,能防止系统内部人员伪造访问记录,能适合多种安全性强度的需要。该方案计算特性简单。

A Remote Password Double Authentication Scheme

A remote password authentication scheme is given only applying some arithmetic operation and one_way function in field GF(P),and analyzes this scheme's security and computing property.In the scheme ,authentication is double between user and system,every user can choose his password by himself,intruders cannot derive any user's password and any secret information.The scheme is without password table,can withstand replaying attacks,avoid to fab-ricate accessing history,suit for many security intensity.This scheme's computing is simpler.