분할된 패스워드 기반 인증된 키교환 프로토콜
Split Password-Based Authenticated Key Exchange
1
조회
0
다운로드
1
인용
0
참고문헌
초록
본 논문은 신뢰할 수 없는 네트워크를 통해서도 사용자를 인증하고 안전한 암호통신용 세션키 교환에 적합한 패스워드 기반 인증 프로토콜을 제안한다. 기본 아이디어는 패스워드를 분할한 후 각 분할된 패스워드 지식들을 확대(amplification)하는 구조로 설계하는 것으로서, 이는 패스워드 검증정보의 램덤성(randomness)을 증가시키기 위한 것이다. 또한 서버 검증자 파일을 암호화하여 보관함으로서 서버 파일 타협에 의한 오프라인 사전추측 공격에 강인하도록 구성한다. 더불어 검증자 파일 및 서버의 암호화 키가 다수의 서버들에게 분산되도록 설계된 방식을 제안한다.
Abstract
This paper presents a password based authentication and key exchange protocol which can be used for both authenticating users and exchanging session keys for a subsequent secure communication over an untrusted network. Our idea is to increase a randomness of the password verification data, i.e., we split the password, and then amplify the split passwords in the high entropy-structured password verification data. And in order to prevent the verifier-compromised attack, we construct our system such that the password verification data is encrypted with the verifier's key and the private key of verifier used to encrypt it is stored in a secure place like a smart cards. Also we propose the distributed password authentication scheme utilizing many authentication servers in order to prevent the server-compromised attack occurred when only one server is used. Furthermore, the security analysis on the proposed protocol has been presented as a conclusion.
참고문헌 (23)
- "Provably Secure Password Authenticated Key Exchange Using Diffie-Hellman", pp.156~171 (2000)
- "Ultimate Solution to Authentication via Memorable Password" (2000)
- "Authentication and key agreement via memorable passwords" (2001)
- "An efficient password-based protocol for authenticated key exchange", pp.324~335 (2003)
- "Addendum to Summary of AMP" (2003)
- "Encryted key exchange", pp.72~84 (1992)
- "Secure remote password protocol", pp.97~111 (1998)
- "Secure Network Authentication with Password Identification" (1999)
- "The AuthA protocol for password-based authenticated key exchange" (2000)
- "Threshold Password-Authenticated Key Exchange", pp.369~384 (2002)
- "Intrusion Tolerant Password-Enabled PKI" (2002)
- "Refinement and Improvement of Virtual Software Token Protocols", 8(1), pp.~1 (2004)
- "Server-Assisted Generation of a Strong Secret from a Password" (2000)
- "다중서버를 이용한 인증된 키교환 프로토콜", 13(1), pp.87~98 (2003)
- "Authenticated Key Exchange Secure Against Dictionary Attack", pp.139~155 (2000)
- "Authenticated Diffie-Hellman Key Agreement Protocols", pp.339~361 (1998)
- "Robust Threshold DSS Signatures", pp.354~371 (1996)
- "Wallet databases with observer", (740) (1992)
- "Simplified VSS and Fast- track Multiparty Computations with Application to Threshold Cryptography", pp.101~111 (1998)
- "A New Approach to Efficient Verifiable Secret Sharing for Threshold KCDSA", pp.208~220 (1999)
- "Diffie- Hellman, Decision Diffie-Hellman, and Discrete Logarithms", pp.327~ (1998)
- "The decision Diffie-Hellman problem,", pp.48~63 (1998)
- "Handbook of applied cryptography", pp.618~ (1997), CRC Press inc.