• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Distributed computing and internet technology. >Cryptanalysis and Improvement of Sood et al.'s Dynamic ID-Based Authentication Scheme
【24h】

Cryptanalysis and Improvement of Sood et al.'s Dynamic ID-Based Authentication Scheme

机译：Sood等人基于动态ID的身份验证方案的密码分析和改进

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Anonymity is one of the important properties of remote authenti cation schemes to preserve user privacy. Recently, Sood et al. showed that Wang et al.'s dynamic ID-based remote user authentication scheme fails to preserve user anonymity and is vulnerable to various attacks if the smart card is non-tamper resistant. Consequently, an improved version of dynamic ID-based authentication scheme was proposed and claimed that it is efficient and secure. In this paper, however, we will show that Sood et al.'s scheme still cannot preserve user anonymity under their assumption. In addition, their scheme is also vulnerable to the offline password guessing attack and the stolen verifier attack. To remedy these security flaws, we propose an enhanced authentication scheme, which covers all the identified weaknesses of Sood et al.'s scheme and is more secure and efficient for practical application environment.
机译：匿名性是远程身份验证方案以保护用户隐私的重要属性之一。最近，Sood等人。结果表明，Wang等人的基于动态ID的远程用户身份验证方案无法保留用户匿名性，并且如果智能卡具有防篡改功能，则很容易受到各种攻击。因此，提出了一种改进的基于动态ID的身份验证方案，并声称它是有效且安全的。但是，在本文中，我们将表明Sood等人的方案在他们的假设下仍然无法保留用户匿名性。此外，他们的方案还容易受到脱机密码猜测攻击和被盗验证程序攻击的攻击。为了解决这些安全漏洞，我们提出了一种增强的身份验证方案，该方案涵盖了Sood等人方案的所有已发现的弱点，并且对于实际应用环境更加安全有效。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号