Secure Enterprise Information Systems: A Mutual Authentication Scheme for Roaming Users Using Memorable Information

摘要

In enterprise infonnation systems, personal mobility provides the ability for roaming users to access enterprise network services from anywhere at anytime. However, methods for mutual authentication between roaming user and servers are still far from satisfied. In this paper, we focus on such a mutual authentication scheme, by which users can only use memorable information to log in servers with confidence. The scheme is designed in a threshold fashion to improve system's availability and robustness. It can resist known attacks, such as replay attack, password guessing attack and verifier stolen attack. We believe this scheme is suitable for enterprise computing scenarios, in which network environments are confidential and closed.