Efficient Three-Party Authentication and Key Agreement Protocols Resistant to Password Guessing Attacks

葉禾田(Her-Tyan Yeh) ； 孫宏民(Hung-Min Sun) ； 黃宗立(Tzonelih Hwang)

《Journal of Information Science and Engineering》 19卷6期 (2003/11) Pp. 1059-1070

https://doi.org/10.6688/JISE.2003.19.6.6

並列摘要

Three-party EKE was proposed to establish a session key between two clients through a server However, three-party EKE is insecure against undetectable on-line and off-line password guessing attacks In this paper, we first propose an enhanced three-party EKE to withstand the security risk in three-party EKE We also propose a verifier-based three-party EKE that is more secure than a plaintext-equivalent mechanism in which a compromise of the server's database will not result in success in directly impersonating clients

並列關鍵字

network protocol ； authentication ； key agreement ； password guessing attack ； perfect forward secrecy