Authentication method based on smart card in multi-server environment

Abstract

The invention discloses an authentication method based on a smart card in a multi-server environment. According to the authentication method, the participation of a third party in authentication is not needed, a user just needs to register for one time, the smart card only needs to store information of constants, the authentication and access among multiple servers can be realized, a server end also does not need to store any user information, and thus a problem that the information stored by the smart card is increased with the increase of registration servers when no third party participates authentication in the multi-server environment is solved. The security of an authentication model is proved through BAN logic analysis, at the same time performance analysis shows that the authentication scheme of the invention has a low storage cost requirement compared with an existing authentication scheme based on the smart card in the multi-server environment in the condition that computation cost and communication cost do not increase burden significantly.

Description

technical field [0001] The technical field that the present invention relates to is the research of identity authentication mechanism under multi-server environment, specifically relates to a kind of authentication method based on smart card under multi-server environment and registration center does not participate in the authentication process between server and user. Background technique [0002] With the rapid development of the Internet and its applications, Internet applications in a multi-server environment have also been widely popularized, which greatly increases the demand. Although online services continue to provide users with various services that are convenient for users' lives, their security issues have always been the focus of attention. How to ensure the legitimacy of users and the security of information? The identity authentication of legitimate users is the first security guarantee of network security, so the identity authentication mechanism is a very i...

AI Technical Summary

Problems solved by technology

Although online services continue to provide users with various services that are convenient for users' lives, their security issues have always been the focus of attention. How to ensure the legitimacy of users and the security of information? The identity authentication of legitimate users is the first security guarantee of network security, so the identity authentication mechanism is a very important and indispensable link for any network service

And as the number of registered servers increases, the secret authentication information stored in the smart card increases, which is very unrealistic for smart cards with limited storage capacity.

Images