A Two-way Authentication Method Based on Smart Card

Abstract

An identity authentication method based on a smart card, including a registration step, a login step and an authentication step, wherein the registration step includes that the user registers with a background server, and the background server issues a smart card to the user, and two latest random passwords are stored in each smart card. key and the unique identifier of the smart card; the login step includes that the user inserts the smart card into the card reader to log in to the background server; the authentication step includes, after successful login, verifying the legitimacy of the smart card and the background server, wherein the two random passwords The key uses the improved ECC signature method for digital signature, uses the shared key to encrypt the digital certificate, random key and signature as a whole through the AES encryption algorithm, and updates after the smart card successfully authenticates the background server and the background server successfully authenticates the smart card. random key. The method can resist common man-in-the-middle, parallel session, forgery and replay attacks, and improve the security and efficiency of the authentication process.

Description

technical field [0001] The disclosure belongs to the technical field of security identity recognition and communication, and specifically relates to a smart card-based two-way authentication method. Background technique [0002] With the rapid development of the smart card industry, smart cards are more and more widely used, so ensuring the mutual authentication between the smart card and external devices is very important for the safe transmission of data. Since Lamport first proposed a remote password authentication protocol based on an insecure channel in 1981, many researchers have proposed a remote user authentication protocol to improve the security of data exchange. In 2014, Huang HF et al. proposed an improved time stamp-based smart card user authentication scheme. The remote server does not need to provide any authentication information for the user, which can safely resist all possible attacks. However, Amin et al. found that the Huang HF scheme cannot safely resi...

AI Technical Summary

Problems solved by technology

In 2015, Sarvabhatla and others pointed out that the Islam scheme cannot resist key attacks such as password guessing and user simulation, and proposed a smart card two-way authentication scheme based on dynamic ID, which can resist all password attacks

To sum up, in the current smart card application authentication process, there are problems of information leakage caused by attacks such as man-in-the-middle, parallel sessions, forgery and replay, and at the same time, there are problems of long authentication time and low efficiency.

Images