A Remote Authentication Protocol Method Based on Password

Abstract

The invention relates to a remote protocol authentication method based on passwords. The method is characterized in that the method is achieved on the basis of the elliptic curve cryptographic algorithm, and the method includes the following steps that 1, in a system initialization sub-protocol, a user and a server negotiate elliptic curve cryptosystem parameters which need to be used in subsequent authentication; 2, a new user UA performs registration through a user registration sub-protocol and selects an identity label and a user password PWA; 3, when the user UA wants to login a system to perform session key negotiation, firstly the user UA inputs the identity label IDA and the user password PWA, then double-way authentication is conducted between the user UA and the server and secret keys used in subsequent communication are negotiated through identity authentication and a key negotiation sub-protocol.

Description

technical field [0001] The invention relates to a password-based remote authentication protocol method. Background technique [0002] In network applications, identity authentication plays an important role in ensuring the security of network resources, so finding a simple, effective, practical, convenient, and low-cost authentication protocol is the focus of current research. Password-based identity authentication protocol has become a research hotspot in recent years because of its simple data calculation, low deployment cost, security and reliability. However, password-based identity authentication protocols still have security risks. Because users habitually choose to use simple and easy-to-remember character strings as passwords, such as their own initials, combinations of birthday numbers, combinations of ID numbers, email and phone numbers, etc., which will directly lead to this type of identity authentication protocol Vulnerable to typical dictionary attacks, inclu...

AI Technical Summary

Problems solved by technology

[0003] Although password-based authentication has the security risks mentioned above, this does not prevent people from favoring it, because compared with biometric authentication, password authentication mechanism has the advantages of smaller data volume and faster response speed. , and it is easier to implement, and most users can accept it, so the password authentication mechanism is still the main authentication method used in various systems that require authentication, such as system networks.

Images