首页> 外文期刊>IEEE transactions on dependable and secure computing >Efficient Multi-Factor Authenticated Key Exchange Scheme for Mobile Communications
【24h】

Efficient Multi-Factor Authenticated Key Exchange Scheme for Mobile Communications

机译:高效的移动通信多因素认证密钥交换方案

获取原文
获取原文并翻译 | 示例
           

摘要

Authenticated key exchange (AKE) is one of the most important applications in applied cryptography, where a user interacts with a server to set up a session key where pre-registered information (aka. authentication factor), such as a password or biometrics, of the user is stored. While single-factor AKE is widely used in practice, higher security concerns call for multi-factor AKE (MFAKE) schemes, e.g., combining both passwords and biometrics simultaneously. However, in some casually designed schemes, security is even weakened in the sense that leakage of one authentication factor will defeat the whole MFAKE protocol. Furthermore, an inevitable by-product arise that the usability of the protocol often drop greatly. To summarize, the existing multi-factor protocols did not provide enough security and efficiency simultaneously. In this paper, we make one step ahead by proposing a very efficient MFAKE protocol. We define the security model and give the according security analysis. We also implement our protocol on a smartphone and a cloud server. The theoretic comparisons and the experimental results show that our scheme achieves both security and usability.
机译:身份验证密钥交换(AKE)是应用密码学中最重要的应用程序之一,在该应用程序中,用户与服务器进行交互以设置会话密钥,在该会话密钥中,预先注册的信息(即密码或生物识别信息)用户已存储。尽管单因子AKE在实践中被广泛使用,但是出于更高的安全性考虑,需要采用多因子AKE(MFAKE)方案,例如同时结合密码和生物识别技术。但是,在某些随意设计的方案中,从某种意义上讲,一个认证因素的泄漏将破坏整个MFAKE协议,甚至会削弱安全性。此外,不可避免地会产生副产品,该协议的可用性通常会大大下降。总而言之,现有的多因素协议不能同时提供足够的安全性和效率。在本文中,我们通过提出一种非常有效的MFAKE协议向前迈了一步。我们定义安全模型并给出相应的安全分析。我们还在智能手机和云服务器上实施我们的协议。理论上的比较和实验结果表明,该方案实现了安全性和可用性。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号