CAJ | 학술논문

提出一种基于阈下信道的两方口令认证密钥交换协议。协议中，服务器存储用户口令的验证值抵御服务器泄漏伪装攻击，用户的口令明文采用阈下信道生成签名信息传送给服务器，服务器计算出用户的口令明文恢复出阈下信息，再计算口令验证值以实现对用户身份的认证，从而建立起会话密钥。对所提协议的安全性和效率进行分析，结果表明：所提出的协议安全可行且有效。
제출일충기우역하신도적량방구령인증밀약교환협의。협의중，복무기존저용호구령적험증치저어복무기설루위장공격，용호적구령명문채용역하신도생성첨명신식전송급복무기，복무기계산출용호적구령명문회복출역하신식，재계산구령험증치이실현대용호신빈적인증，종이건립기회화밀약。대소제협의적안전성화효솔진행분석，결과표명：소제출적협의안전가행차유효。
A two-party password-authenticated key exchange protocol based on the subliminal channel was proposed.In the proposed protocol,the server stores the user′s password verifier to withstand the server′s compromise and guise at-tacks,the user′s password cleartext is made to a signature message with the subliminal channel to transmit to the server, the server computes the user′s password cleartext to renew the subliminal message,then the server calculates the pass-word verifier to authenticate the user′s identity,so a session key is made between the server and the user.The security and the efficiency of the proposed protocol were analyzed,it shows in the analysis that the proposed protocol is secure and effective.