Kerberos identity authentication protocol improvement method based on national cryptographic algorithm

Abstract

The invention discloses a Kerberos identity authentication protocol improvement method based on a national cryptographic algorithm, a traditional Kerberos protocol is improved by using session key dynamics and a hybrid cryptosystem based on the national cryptographic algorithm, and the improved Kerberos protocol comprises a registration process and an authentication process; wherein the authentication process comprises three stages: mutual authentication between the client and the AS; the client communicates with the TGS; the client communicates with the application server; a dynamic key is used as a shared key between the client and the AS, and encryption and decryption are carried out by adopting a hybrid cryptosystem based on a national cryptographic algorithm in an authentication process. According to the method, rainbow table attacks, blasting attacks and counterfeit user attacks caused by weak passwords can be effectively resisted, and replay attacks, man-in-the-middle attacks and the like caused by time synchronization can be effectively resisted, so that the security and the efficiency of a Kerberos identity authentication protocol are improved.

Description

technical field [0001] The invention belongs to the technical field of identity authentication and privacy protection in cryptography, and in particular relates to an improvement method of a Kerberos identity authentication protocol based on a national secret algorithm. Background technique [0002] Identity authentication is the cornerstone of network security and is used to ensure the authenticity of both parties. As the most commonly used identity authentication protocol, the Kerberos protocol is widely used in many identity authentication systems such as banking systems, public security systems, and so on. Therefore, it is very important to discuss the defects of the Kerberos protocol and improve the Kerberos security scheme to ensure the security of the computer system. At the same time, since my country released commercial encryption in 2012, the field of encryption in my country has developed rapidly and is widely used in various fields such as e-government, e-commer...

AI Technical Summary

Problems solved by technology

Through analysis, although the inherent security problems of the original protocol have been effectively solved, other problems such as increased overhead and difficult key management have also occurred.

Images