The invention relates to a method for
mutual authentication of user identities based on elliptic curve passwords. The characteristics of storage capability, calculation capability and limited bandwidth of an Ad Hoc network are considered, and a self-
authentication public key
system and the intractability of an elliptic curve
discrete logarithm problem are utilized, so as to reduce the interaction times of the user identity
authentication process, and accelerate the
authentication speed. The method comprises the following steps of
system initializing, user registering, and
mutual authentication of the user identities. The method has the advantages that while the
mutual authentication of the user identities is guaranteed, the function of
session key negotiation is realized, the storage expense, communication expense and calculation expense are all less, the
replay attack, man-in-the-middle
attack, counterfeiting and tampering
attack, and key disclosure counterfeiting
attack can be resisted, a generated one-time
session key has the advancing security and backward security, and the security is higher.