【摘要】 针对基于口令的远程用户鉴别方案在时间戳和用户ID以及挑战/应答机制中的单相认证的上存在的脆弱性,采用指纹和智能卡双重认证技术,提出了挑战/应答机制的改进方案,该方案能进行双向认证,可抵抗重放攻击和假冒攻击,且由示证和认证双方共同生成随机因子,也体现了认证的公平性,认证过程不需要传递用户指纹信息,保护了用户的隐私,比较发现该方案是一种更安全、实用、简单、便捷的基于动态口令的远程双向认证方案。更多还原

【Abstract】 in view of exists fragile based on the password long-distance user distinction plan in the time stamp and user ID and as well as in challenge/reply mechanism single-way authentication.This paper propose an improved scheme based on chanllenge-re-sponse adopting diplex authentication technologies,fingerprint and smart card.it could achieve mutual authentication and replay at-tack and masquerade attack.The random factor was generated by the mutual parties to guarantee the authentication fairness.Moreover user’s fingerprint needed not be transmitted in the authentication process to protect user’s privacy.It is a more secure and simple and practical and convenient remote double authtication scheme based on dynamic password.更多还原