Remote protocol authentication method based on passwords

Abstract

The invention relates to a remote protocol authentication method based on passwords. The method is characterized in that the method is achieved on the basis of the elliptic curve cryptographic algorithm, and the method includes the following steps that 1, in a system initialization sub-protocol, a user and a server negotiate elliptic curve cryptosystem parameters which need to be used in subsequent authentication; 2, a new user UA performs registration through a user registration sub-protocol and selects an identity label and a user password PWA; 3, when the user UA wants to login a system to perform session key negotiation, firstly the user UA inputs the identity label IDA and the user password PWA, then double-way authentication is conducted between the user UA and the server and secret keys used in subsequent communication are negotiated through identity authentication and a key negotiation sub-protocol.

Description

Technical field [0001] The invention relates to a password-based remote authentication protocol method. Background technique [0002] In network applications, identity authentication plays an important role in ensuring the security of network resources. Therefore, finding a simple, effective, practical, convenient, and low-cost authentication protocol is the focus of current research. Password-based identity authentication protocols have become a research hotspot in recent years due to simple data operations, low deployment costs, and safety and reliability. However, the password-based identity authentication protocol still has security risks. Because users are habitually choosing to use simple and easy-to-remember strings as passwords, such as the abbreviation of their name, the combination of birthday numbers, the combination of ID numbers, and the mailbox phone number, which will directly lead to this type of identity authentication protocol It is vulnerable to typical dicti...

AI Technical Summary

Problems solved by technology

[0003] Although password-based authentication has the security risks mentioned above, this does not prevent people from favoring it, because compared with biometric authentication, password authentication mechanism has the advantages of smaller data volume and faster response speed. , and it is easier to implement, and most users can accept it, so the password authentication mechanism is still the main authentication method used in various systems that require authentication, such as system networks.

Images