【摘要】 传统的口令认证方案面临自动程序实施的在线字典攻击威胁,为了解决这个问题,Pinkas和Sander提出了一个基于RTT的口令认证协议,虽然该协议有很高的安全性,但是该协议存在已知函数攻击和缺少对恶意用户的惩罚措施的不足,针对以上不足,提出了一种新的改进方案。改进后的协议不公避免了原有协议的不足,且能更好地防止在线字典攻击。在.NET平台下编程实现了改进后的协议,实验结果表明,该协议有很好的可用性和可扩展性。更多还原

【Abstract】 The traditional password authentication protocol mainly face the online dictionary attacks,which is implemented by the auto-mated programs.To solve this problem,a RTT-based password authentication protocol is proposed,which had good security,analysis found that the protocol had shortcomings: Existing attack of known function and the lack of punitive measures against malicious users,in order to overcome the shortcomings,the paper proposes a novel scheme.The novel protocol avoids the shortcomings of the original protocol,so it is better to prevent online dictionary attacks.Finally,programming implements the improved protocol under the.Net platform,experiment shows that the novel protocol has good availability and scalability.更多还原