基于圆特性的身份认证与密钥协商

有的几何认证方案采用"欧氏空间直线"等简单几何结构,使方案的安全性较低;有的虽然采用了复杂的"n维空间圆"结构,但由于登录消息太简单,也降低了安全性.本文设计了一个几何认证与密钥协商方案,它基于"n维空间圆上(n＋1)个点可以唯一重构该圆"的n维空间圆构造原理,还采用了多变量的单向散列函数来计算登录消息,加强了用户登录消息的安全性,使方案能抵抗口令猜测、重放、窃听与离线消息分析攻击;并且采用基于计算观点的正确认证协议形式化证明方法—Bellare-Rogaway模型,证明了本文身份认证与密钥协商协议是安全的.

Authentication and Key Exchange Based on Circle Properties

Some geometric approach-based authentications have been proposed. However, some of them use simple structure, such as lines of Euclidean space; reduce the security of the schemes. Other schemes use sophisticated geometric approaches, the circle property on an n-dimensional space representation, but their login message is simple and insufficient. Hence, these schemes are insecure, too. In this paper, a user authentication scheme based on the property of a circle in n-dimension space is proposed. Its basic theory is that n+1 point given on the same circle of n-dimension can determine its formula uniquely. A multi-variable one-way hash function is introduced to reinforce the robustness of the login message for security. Our scheme is secure against the password guessing attack, replaying attack, eavesdropping attack, off-line message analysis attack. The proposed protocol is proven secure by a formal approach of a computational view of correct protocols — the Bellare-Rogaway model.