一种基于零知识证明的远程桌面认证协议

目前桌面云环境下用户身份认证过程中用户属性可能存在泄漏。针对此种安全威胁,提出了一个远程桌面认证模型。在该模型的基础上,提出了一种基于零知识证明的远程桌面认证协议ZPBRDAP。该协议包括属性注册协议(AR协议)与身份认证协议(IA协议),在不暴露用户身份属性的同时完成用户身份认证。最后,分析了该协议的正确性、安全性以及协议效率,表明该协议具有良好的可用性。

A zero-knowledge proof based remote desktop authentication protocol

Aiming at the possibility of user attributes revelation during the user identity authentication period under the desktop cloud environment, a remote desktop authentication model was presented. On the basis of the model, a zero-knowledge proof based remote desktop authentication protocol ZPBRDAP was presented. The protocol consisted of attributes registration protocol and identity authentication protocol, which could accomplish user identity authentication without exposing user identity attributes. At last,the validity, the security and the efficiency of the protocol was analyzed. It is demonstrated that the protocol has a strong usability.