高效率之遠端身份認證協定應用於智慧卡之研究

A Study of Efficient Remote User Authentication Protocol with Smart Cards

魏瑋辰(Wei-Chen Wei)

指導教授 ： 黃慧鳳

國立臺中科技大學/資訊學群/資訊科技與應用研究所/碩士(2007年)

摘要

近年來，隨著網路服務的快速發展，帶動了智慧卡在網路上應用的普及，網路使用者對智慧卡使用的安全性也因此更加重視。由於網路是一個虛擬的世界，當使用者在存取網路資源或服務時，有些重要的個人資訊就會在不安全的公眾網路上傳輸，容易發生機密資訊遭有心人士所竊取的風險，也可能發生有心人士冒充使用者的身份來存取網路資源的問題。因此，需要一個身份驗證的機制來確認通訊雙方之身份。本論文主要針對智慧卡所擁有低成本運算與方便可攜性的特性，提出二個適用於智慧卡之使用者身份驗證協定以利作為不同環境下之使用。為了有效地降低智慧卡之運算成本以及資訊傳輸量，本論文捨棄了傳統運算量大的RSA或ElGamal之公開金鑰之密碼系統，讓使用者的機密資訊在公開網路傳輸時也能具有保護作用。在達到雙方身份驗證的同時，也產生通訊雙方共同擁有的會議金鑰，讓個人重要資訊獲得更多保障。另一方面，在本研究裡，我們也提供一種讓使用者可隨時變更智慧卡的密碼之功能。有了這個運算成本低且功能完整的技術，讓智慧卡身份驗證協定更加有效率而且更具人性化。
整體而言，本論文將探討一些具有低成本運算與低資訊傳輸量的技術，除了能適用於有線網路環境之服務，更將適合應用於無線網路狀態之服務。

關鍵字

身份驗證 ； 智慧卡

並列摘要

Recently, due to the rising and flourishing of the computer networks development. Application of smart card becomes even more and more universality and functionality. Hence, the remote user authentication scheme over an insecure channel gets a topic for discussion.
Owing to the Internet is a virtual network environment. When a user wants to access resource and service for any remote server, several important information of personal will deliver over insecure public network. Event of secret information stolen by intruder easily occurred, even the identity of legal user to access network resource faked. Therefore, it claims the remote user authentication protocol to authenticate the validity between the two parties of a user and a server. This thesis focuses on remote user authentication mechanism with smart cards, and then proposes two user authentication protocols with smart cards. Moreover, it achieves the merit of low-computation cost and low-amount transmission.
In order to reduce the computation cost and the amount of information transmission for smart cards, this thesis gives up the traditional public key cryptosystem based on RSA and ElGamal. Our propose methods can protect user’s secret information over public network and can generate the common session key during mutual authentication between two parties of a user and a server. In addition, a user can freely update password in this proposed protocol.
In this thesis, the required operations are only few hashing operations, simple exclusive-or operations, and nonce-based number. Since the properties of the low-computation cost and the low-amount transmission, the proposed proposal can greatly reduce the computation cost and lower the amount of communication for both the user and the server. Moreover, this proposed protocol also provides complete functionality and suitability for the user with smart cards upon wireless network services.
Overall, this dissertation is to investigate more efficient and low communications in wireless networks. We want the results of proposed schemes will be more attractive to many applications.

並列關鍵字

authentication ； smart card

參考文獻

[1] L. Lamport, “Password authentication with insecure communication,” Communication of ACM, Vol. 24, pp. 770-772, 1981.

[2] M. S. Hwang and L. H. Li, “A new remote user authentication scheme using smart cards,” IEEE Transactions on Consumer Electronics, Vol. 46, pp. 28-30, 2000.

[3] H. M. Sun, “An efficient remote user authentication scheme using smart cards,” IEEE Transactions on Consumer Electronics, Vol. 46, pp. 958-961, 2000.

[4] H. Y. Chien, J. K. Jan, and Y. M. Tseng, “An efficient and practical solution to remote authentication: Smart Card,” Computers & Security, Vol. 21, pp. 372-375, 2002.

[5] L. K. Lee, S. R. Ryu, and K. Y. Yoo, “Fingerprint-based Remote User Authentication Scheme Using Smart Cards,” Electronics Letters, Vol. 38, pp. 554-555, 2002.