一种隐蔽用户身份信息的认证方案

分析了一种基于随机数和Hash函数的认证方案(NHRA)的认证过程,发现该方案存在着远程主机上容易泄露用户身份信息的安全问题。针对该问题,构造了一个基于随机数和Hash函数、隐蔽用户身份信息远程身份认证方案。该方案允许用户自主选择和更改口令、能够抵御假冒远程主机攻击、抵御假冒合法用户攻击,对用户身份信息认证更加安全有效。

Hidden user information authentication scheme

Analysing process of a authentication scheme(NHRA) which is based on nonce and hash function,it is found in the scheme exists user information disclosure security problem on remote server.To solve the problem,a scheme is demonstrated,which is based-on nonce and hash,hidden information of user and remote host login.Users freely choose and change password at their own will.They can resists masquerading remote system attack and legitimate user attack,user identity authentication is more safe and effective.