Remote identity authentication method participated in by registration center under multi-sever environment

Abstract

The invention discloses a remote identity authentication method participated in by a registration center under a multi-sever environment, which comprises the following steps: a user registration application is submitted to the registration center; a smart card is adopted to log in to a server which is registered in the registration center; the smart card performs local legality verification on a user, if yes, first logging-in requesting information is generated and sent to a server; the server generates second logging-in requesting information and sends the information to the registration center; the registration center performs legality verification on the server and the user identity according to the received second logging-in requesting information, if yes, the registration center generates first authentication information and sends the information to the server; the server performs legality verification on the registration center, if yes, the server sends second authentication information to the smart card; the smart card performs legality verification on the server and the registration center, if yes, the smart card, the server and the registration center jointly generate a session key. The method can prevent anonymity attack and avoid the attack caused by reveal of a verification table.

Description

Technical field [0001] The invention relates to the technical field of information security and communication, in particular to a remote identity authentication method in which a registration center participates in a multi-server environment. Background technique [0002] With the rapid development of the Internet and e-commerce technology, the Internet provides many services such as online shopping, online games, electronic medical care, etc. Remote users can obtain remote system resources or services in the public network environment through identity authentication. While using non-secure networks to process secret data, password authentication is one of the simplest and most convenient authentication mechanisms. [0003] Lamport first proposed a remote password authentication scheme for non-secure communication in 1981. However, in this scheme, the server must store a password table and cannot resist tampering attacks. Based on ElGamal's public key encryption system in 1985 t...

AI Technical Summary

Problems solved by technology

However, Li et al.'s scheme cannot achieve user anonymity, and cannot resist imitation attacks, password guessing attacks, etc.

Images