Method and Apparatus for Authenticated Key Exchange Using Password and Identity-based Signature

摘要

The present invention relates to an authentication key agreement method using a password and an ID-based signature for allowing a client to be authenticated with an ID and a password while providing robustness for a server impersonation attack when the password is leaked, and an apparatus therefor. The method comprises the steps of: generating a message in a first apparatus and transmitting the message to a second apparatus; transmitting a signed message from the second apparatus to the first apparatus; and verifying the signed message in the first apparatus.