Three-party password-based authenticated key exchange protocol in no need of smart card

Abstract

The invention discloses a three-party password-based authenticated key exchange protocol in no need of a smart card. The method comprises the following steps: A, in an initialization stage, a server Sinitializes certain parameters and publishes the parameters {p, alpha, h1(.), IDS and Ts(alpha)}, wherein Ts(alpha) is used as the public key of the S, the s is used as the private key of the S and the two keys are stored in a database, and the protocol does not need a smart card; B, in a registration stage, is a legal user Ui wants to register the self information to the server S, a registrationrequest is firstly initiated; C, authenticated key exchange is carried out; and D, in a password exchange stage, when a user A feels that the current password may be or is already leaked out, a new password needs to be exchanged in order to reduce unnecessary losses. The unsafe problems, such as disclosure and theft of information between two parties in the Internet communication, can be solved,the authenticated key exchange purposes are realized in the communication process with no need of assistance of the smart card, and the higher performance and the higher efficiency are realized in a similar safety protocol.

Description

technical field [0001] The invention relates to a three-party password authentication and key negotiation protocol without smart cards. Background technique [0002] Due to the continuous promotion and expansion of the network, there are more and more hidden dangers in safety. For example, the increasingly common online payment of e-commerce, portal websites and e-mails, etc. will transmit some users' privacy and other related sensitive information, which may be maliciously hijacked and tampered by attackers. Once a security leak occurs, it will basically cause great or even unlimited losses to users. Therefore, information security has become an urgent need for people, and it is also a guarantee for the normal operation of almost all network communications. [0003] The AKE protocol assists both communicating parties to authenticate each other and establish a session key to protect subsequent communication content. Password-based authenticated key exchange (PAKE) protoco...

AI Technical Summary

Problems solved by technology

[0006] Because in the actual production and application environment, the performance requirements of the protocol may not be high, and economic and convenience factors are more valued, people choose not to use smart cards to realize functions such as communication party identity authentication and key negotiation; and, according to the aforementioned literature analysis, Many protocols of the same type suffer from security attacks or are inefficient

Images