【摘要】 对谭凯军等提出的基于矢积的远程口令鉴别方案进行了安全性分析,指出攻击者为了冒充用户的登录请求,只须截获该用户的两次登录请求,或者只须再申请一张智能卡,取出其中有关信息后截获一次登录请求,因而该方案不安全.针对上述两种攻击,也对该方案提出了一些修改意见.更多还原

【Abstract】 This paper analyzes the security of Tan’s scheme for remote password authentication based on cross-product. We point out that to impersonate one user’s log-in reguest, the intruders need only to know the user’s two log-in requests, or need only to know one log-in request after booking a smart card and getting some useful information from it, so the scheme is not secure. Some modifications to Tan’s scheme for avoiding the above two kinds of possible attacks are given.更多还原