CAJ | 학술논문

口令认证是身份验证领域的研究热点，最近几年很多基于口令的认证协议被提出来。该文对一种远程动态口令认证协议进行了安全分析，指出了这种认证协议存在无法抵抗冒充攻击和中间人攻击的安全漏洞。对其进行了改进，提出一种命名为SH-Key的远程动态口令认证协议。通过安全分析证明这种协议能够为用户提供安全，高效的远程动态口令认证。
구령인증시신빈험증영역적연구열점，최근궤년흔다기우구령적인증협의피제출래。해문대일충원정동태구령인증협의진행료안전분석，지출료저충인증협의존재무법저항모충공격화중간인공격적안전루동。대기진행료개진，제출일충명명위SH-Key적원정동태구령인증협의。통과안전분석증명저충협의능구위용호제공안전，고효적원정동태구령인증。
Password authentication is a hot research field of identity verification, in recent years many authentication protocol based on password is proposed. This paper analyses the safety of a remote dynamic password authentication protocol, and it is point?ed out that the authentication protocol vulnerabilities cannot resist the impersonation attack and the man in the middle attack. It is improved in this paper, propose a protocol named SH-Key remote dynamic password authentication. Through the security analysis shows that this protocol can provide a safe, efficient remote dynamic password authentication.