摘要
针对传统S/Key协议容易遭受伪服务器攻击和小数攻击等安全隐患,文中基于低计算复杂度的DES和MD5算法,提出一种具备抵抗多种安全攻击能力的多因素身份认证方案。首先,分析传统S/Key认证协议的具体流程,并阐明其在网络数据交互过程中的不足;再基于此,利用随机数生成器、DES算法和MD5算法改变用户隐私信息的传输方法,深度改进S/Key协议的用户注册和服务器认证方法,实现数据交互中用户和服务器之间的双向认证,有效地增强身份认证系统的保护机制与安全性能。相关仿真及安全性分析结果表明,与传统S/Key协议相比,基于改进S/Key协议的身份认证方案能够抵抗伪服务器攻击和小数攻击,具备更加优异的安全性能和算法执行效率。
As the traditional S/Key protocol has the security hidden dangers and is vulnerable to pseudo server attack and decimal attack,a multi⁃factor identity authentication scheme with the ability to resist various security attacks is proposed based on DES and MD5 algorithm with low computational complexity.The specific process of traditional S/Key authentication protocol is analyzed,and its defects in the process of network data interaction are clarified.On this basis,the random number generator,DES algorithm and MD5 algorithm are used to change the transmission method of user privacy information,and deeply improve user registration and server authentication method of S/Key protocol,so as to realize the two⁃way authentication between user and server in data interaction,and effectively enhance the protection mechanism and security performance of the identity authentication system.The relevant simulation and security analysis results show that,in comparison with the traditional S/Key protocol,the identity authentication scheme based on the improved S/Key protocol can resist pseudo server attacks and decimal attacks,and has more excellent security performance and algorithm execution efficiency.
作者
刘永辉
赵丽
LIU Yonghui;ZHAO Li(The Open University of Changji,Changji 831100,China;Xinjiang Agricultural Vocational Technical College,Changji 831100,China)
出处
《现代电子技术》
2022年第24期156-160,共5页
Modern Electronics Technique
基金
新疆省教育厅高等职业院校创新和发展教学改革项目(xj16⁃006)。
关键词
多因素身份认证
改进S/Key协议
隐私保护
用户注册
服务器认证
双向认证
安全性分析
multi⁃factor identity authentication
improved S/Key protocol
privacy protection
user registration
server authentication
two⁃way authentication
security analysis
