使用智慧卡之通行碼身分鑑別協定

A Password-based Authentication Scheme Using Smart Cards

10.6382/JIM.200707.0179

廖鴻圖(Horng-Twu Liaw)；林建福(Jiann-Fu Lin)；蕭麗齡(Li-Lin Hsiao)；鄭惠菱(Hui-Ling Cheng)

身分鑑別 ； 通行碼 ； 單向雜湊函數 ； 密碼學 ； Authentication ； Password ； One-way hash function ； Cryptography

資訊管理學報

14卷3期（2007 / 07 / 01）

179 - 196

繁體中文

隨著網際網路(Internet)的快速興起，使用者已逐漸透過網路來完成各種交易，因此如何在分散式網路上，使遠端伺服器確認使用者的身分與使用權限，則變成相當重要的議題。本文提出一個兼具安全性與完整性的以通行碼為基礎身分鑑別機制，並滿足人性化需求、雙向鑑別低計算與通訊成本等多項特性。此外，本機制透過鑑別的過程，同時也產生一把會議金鑰，以確保鑑別後通訊訊息的私密性與完整性，並利用公開金鑰密碼技術來解決使用者註冊階段時安全通道不合理假設的問題。

Owing to the rapid development of the Internet, each user can finish various kinds of trade via the network. Therefore, it is an important issue that ho to confirm the identity of user and user's access rights for any remote server. This paper proposes a secure password-based authentication scheme that satisfies several secure properties including user friendly, mutual authentication, lower computation and communication cost. Besides, this scheme produces the session key through the processes of authentication to ensure privacy and integrity, and solves the unreasonable assumption problem of the secure channel.

1. (2005).Network Security Technology Company Limited Website.http://www.nst.tw/html/products_cc1010.html
2. Chang, Chen-Cheng,Lin, Chu-hsing,Chiang, Chi-han(2000).Security of E-Commerce.
3. Chen, Chien-Ming(2003).Attacks and Solutions on Hash-Based Password Authentication Protocols.Master Thesis, Department of Engineering Science, FU JEN Catholic University.
4. Ku, Wei-Chi,Chen, Chien-Ming(2002).Stolen-Verifier Attack on Two New Strong-Password Authentication Protocols.IEICE Transaction on Communications.
5. Ku, Wei-Chi,Chen, Shuai-Min,Tsai, Hao-Chuan(2003).Solutions on Hash-Based Password Authentication Protocols.Communications of the CCISA.
6. Ku, Wei-Chi,Tsai, Hao-Chuan,Chen, Shuai-Min(2003).Two Simple Attacks on Lin-Shen-Hwang`s Strong-Password Authentication Protocol.ACM SIGOPS Operating System Review.
7. Lamport, L.(1981).Password Authentication with Insecure Communication.Communications of the ACM.
8. Lin, Chin-Wei,Shen, Jau-Ji,Hwang, Min-Shiang(2003).Security Enhancement for Optimal Strong-Password Authentication Protocol.ACM SIGOPS Operating System Review.
9. Lin, Chun-Li,Sun, Hung-Min,Hwang, Tzonelih(2001).Attacks and Solutions on Strong-Password Authentication.IEICE Transactions on Communications.
10. Sandirigama, Manjula,Shimizu, Akihiro,Noda, Matu-Tarow(2000).Simple and Secure Password Authentication Protocol (SAS).IEICE Transactions on Communications.
11. Shimizu, A.(1990).A Dynamic Password Authentication Method by One-way Function.IEICE Transactions on Information and Systems.
12. Tsuji, Takasuke,Shimizu, Akihiro(2003).An Impersonation Attack on One-Time Password Authentication Protocol OSPA.IEICE Transactions on Communications.
13. Wang, Ren-Chiun(2004).A Study on Remote User Password Authentication Schemes.Master Thesis, Department of Information Management, Chaoyang University of Technology.

1. 鄭志彥、劉念本、張美華(2010)。智慧卡型電子錢包與相容性。電子商務學報，12(4)，571-594。