一种在不安全信道上的动态口令远程用户认证方案

摘要

相比传统的静态口令身份认证技术而言，动态口令身份认证技术有更高的安全性。现有的动态口令身份认证机制大多采用公钥加密系统，造成了计算量大、密钥难以保存等难题。针对这种情况，提出一种基于 Hash 函数、对称加密体制和挑战／应答机制相结合的新型动态口令身份认证方案，并对该方案进行了性能测试与分析。实验结果表明，该方案不但实现了网络环境下的服务器和用户之间的双向认证，而且具有安全性高，实用性强，开销小等特点，可以作为绝大多数不安全网络信道中的身份认证。%Compared with traditional static password identity authentication technology,the identity authentication system with dynamic password is more secure.Current schemes of dynamic password authentication have difficulties in heavy computation load and key storage because of the use of the public key encryption system mostly.In view of this,we propose a new identity authentication scheme with dynamic password which combines hash function,symmetric encryption mechanism and Challenge /Response mechanism.At the same time,we carry out the performance test and analysis on the scheme.Experimental results show that the scheme not only realises mutual authentication between server and clients under the network environment,but also has the advantages of high safety,strong practicability,low cost etc., which can be used as the identity authentication in most insecure network channels.