Mutual Authentication Protocol Based on Smart Card and Combined Secret Key Encryption

摘要

A mutual authentication scheme and secret key exchange based on combined secret key method is proposed. Use hardware including smart card, encryption cards or encryption machine to perform encryption and decryption. Hash function, symmetric algorithm and combined secret key method are applied at client and server. The authentication security is guaranteed due to the properties of hash function, combined secret key method and one-time mutual authentication token generation method. Mutual authentication based on smart card and one-time combined secret key can avoid guessing attack and replay attack. The mutual authentication method can be applied to cloud based application systems to realize mutual authentication and enhance security.