Lightweight anonymous authentication and key negotiation method in multi-server environment

Abstract

The invention relates to a lightweight anonymous authentication and key negotiation method in a multi-server environment and belongs to the technical field of information safety. The method is characterized by achieving the anonymous authentication and key negotiation in the multi-server environment by means of the following three steps: (1) building a system and selecting system parameters; (2) registering in a registering center RC by a server and a user; (3) carrying out authentication and key negotiation by the user and a remote server so as to provide subsequent communication session keys. The lightweight anonymous authentication and key negotiation method is applicable to remote authentication of a mobile terminal and servers with low calculation capability, memory space and communication capability; the mobile terminal can log in any server registered by RC through a user name and a password; the server only can authenticate that the user is a valid user and cannot know the specific identity of the user, so that the privacy of the user is protected; the lightweight anonymous authentication and key negotiation method is excellent in expansibility; the two-party negotiation session keys are determined by random numbers Ni1 and Ni2 selected by authenticating for each time by two parties; the independence and the forward and backward security of the session keys are ensured.

Description

technical field [0001] The patent of the present invention belongs to the field of information security technology, specifically, in the multi-service environment of the mobile Internet, a mobile terminal user authenticates and logs in to a remote server based on biometric information and negotiates a subsequent session key to obtain a remote service. Key agreement method. Background technique [0002] Existing remote authentication technologies mainly include authentication technologies based on passwords, authentication technologies based on smart cards, and authentication technologies based on human biological information. Low-entropy passwords are vulnerable to offline guessing attacks. In a multi-server environment, high-entropy passwords are likely to bring difficulties to users in memorization and management. The smart card is easy to be stolen, and the information stored on the smart card is easy to be attacked by side channel technology and leaked inadvertently. B...

AI Technical Summary

Problems solved by technology

[0003] (1) Poor scalability

Most multi-factor authentication schemes are basically adapted to a single server environment, that is to say, if a user wants to log in to different servers to obtain different services at the same time, the user needs to register on multiple different servers and remember different usernames and passwords. Login password (users use the same username and password on different servers, and the account is vulnerable to impersonation attacks). Research shows that users on the Internet log in to more than 20 different servers per month on average. A large number of usernames and login passwords bring users It is inconvenient to memorize, store, and manage, and it has caused potential safety hazards

In addition, most of the current multi-factor authentication schemes can only provide two-party identity authentication, which has a single function and cannot provide the key negotiation function, and the application scenarios and scope are limited.

[0004] (2) Low efficiency

The current development trend is that mobile terminal users hold mobile terminals with limited computing power, storage capacity and communication capabilities, including smartphones, tablets, and PDAs, which cannot complete complex computing tasks.

Therefore, most existing multi-factor authentication technologies cannot be directly migrated to resource-constrained mobile terminals. It is necessary to design additional low-power multi-factor authentication technologies that only involve Hash operations and XOR operations.

[0005] (3) Poor robustness

At present, most multi-factor authentication scheme systems allow users to change their own passwords under appropriate circumstances to prevent offline or online password guessing attacks by opponents, but biological information cannot be adaptively updated dynamically.

But in fact, the biometric information, such as fingerprints, is damaged due to labor during personal registration, and needs to be upgraded to new biometric authentication information. However, the existing multi-factor authentication scheme cannot meet the application requirements and cannot demonstrate the robustness of dynamic update of authentication technology. sex

[0006] (4) Does not provide privacy protection and anonymous services

At present, users basically operate through mobile terminals with limited computing power and storage capacity such as smartphones and PDAs. Therefore, most multi-factor authentication technologies based on cryptographic technology are not suitable for direct migration to current mobile terminal users.

[0009] In addition, most of the current multi-factor authentication technologies do not take into account the protection of user anonymity

Images