CN106230840A - A kind of command identifying method of high security - Google Patents

Abstract

The invention discloses a high-security password authentication method, which adopts the combination of smart card hardware and cryptographic algorithm, and can be applied to a series of security mechanisms of network services such as finance, online shopping, social interaction and security. The present invention focuses on the combination of smart card and password authentication, including four stages of user registration, login, server and user two-way authentication, and user password modification, in which light functions such as hash functions, XOR operations, and symmetric keys are mainly used. Quantitatively efficient and secure cryptographic protocols and methods. The present invention has high security. By performing special security processing on the user name and password in the information transmission process, the risk of the user name and password being stolen is reduced, and replay attacks and information interception attacks can be effectively prevented. Change your password freely through the server.

Description

A High Security Password Authentication Method

technical field

The invention belongs to the technical fields of information security and cryptography, and in particular relates to a high-security password authentication method combined with a smart card.

Background technique

With the rapid development of computer network technology, cloud computing and cloud storage technology enable a large amount of data originally stored in the client to be stored in the cloud server. This not only greatly releases the storage space of the user end, reduces the pressure of local storage data, but also greatly expands the space range of user storage data, and realizes the sharing of data among different users. However, with the increase in the number of users using cloud services, how to protect user privacy from infringement has become a problem that cannot be ignored in the process of social informatization development.

In response to the above problems, people have designed a variety of authentication mechanisms based on symmetric encryption and asymmetric encryption techniques in modern cryptography. As an efficient and concise identity authentication method, password authentication is widely used in various fields such as finance, online shopping, social networking, and security. Most social network software, corporate access control and other hardware or software-based identity authentication mechanisms use password authentication as their core part. However, password authentication is vulnerable to different types of attacks, such as man-in-the-middle attacks and dictionary attacks, because of its simple operation and insufficient authentication factors. For this type of attack, a representative measure in the prior art is to store the encryption key of each terminal through a trusted host in the network, and the sender uses the encryption key of the local end to encrypt the information, and then sends the ciphertext and this The identity information of the terminal is sent to the receiver. After receiving the information, the receiver sends the identity information of the sender to the trusted host, and the trusted host judges the legitimacy of the sender. For example, the invention patent with publication number CN105471845A titled "Communication Method and System for Preventing Man-in-the-Middle Attack" and publication number CN104936170A titled "Method and Device for Detecting Man-in-the-Middle Attack" all belong to this technology. However, this data sharing technology that relies purely on encryption technology still has the risk of complex algorithms, which need to be updated in a timely manner to prevent them from being decrypted.

Contents of the invention

The technical problem to be solved by the present invention is to propose a method that can realize the confidentiality of user authentication information, allow users to change passwords at any time, and has lower energy consumption and higher efficiency while improving security.

For this reason, in order to make the operation as simple and efficient as possible while ensuring high security, we store some encrypted identity authentication information in the hardware to share the risk of the identity authentication information stored in the software being obtained by an attacker. The identity authentication technology based on the combination of hardware and software has been developed. Compared with traditional password authentication technology, this method can effectively resist various types of attacks.

The specific technical solution is: a high-security password authentication method comprising the following steps:

Step 1, the user registration stage, at this stage, the registered user needs to apply for a smart card first, and the user's personal information is stored in the smart card;

Step 1-1, in the initial stage of user registration, user U _i can freely choose his user name (ID _i ) and password (PW _i ).

Step 1-2, the smart card uses the one-way hash function h() to encrypt the user name (ID _i ) and password (PW _i ), and obtains the information pair (h(ID _i ||PW _i ), h(ID _i ) ) and send it to server S through a secure channel.

In steps 1-3, server S encrypts the sent user information using the one-way hash function h() and server keys x and y to obtain:

$\mathrm{<span\; class="notranslate">\; A</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; x</span>}<span\; class="notranslate">\; )</span>$

$\mathrm{<span\; class="notranslate">\; B</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; A</span>}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span>$

C=h(A)

$\mathrm{<span\; class="notranslate">\; D.</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; the\; y</span>}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; .</span>$

In steps 1-4, the server S returns (B, C, D) to the user U _i through a secure channel.

In steps 1-5, the user U _i stores (B, C, D) in the smart card.

Step 2, in the login phase, when user U _i logs in, he needs to insert the smart card into the corresponding device and enter his user name (ID _i ) and password (PW _i );

Step 2-1, the smart card calls the stored information to calculate:

${\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; B</span>}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; ,</span>$

C _i =h(A _i )

Step 2-2, the smart card compares whether C _i =C is established, and if it is established, it proves the legal identity of the user U _i ;

Step 2-3, the smart card randomly generates an integer N and performs the following calculations:

${\mathrm{<span\; class="notranslate">\; E.</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; N</span>}$

${\mathrm{<span\; class="notranslate">\; CID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; N</span>}$

F _i ＝h(A _i ||D _i ||N)

Step 2-4, the smart card sends the login request (h(ID _i ), E _i , CID _i , F _i ) to the server S;

Step 3, the authentication stage, this stage realizes the mutual authentication between the server and the user, the main steps are as follows:

Step 3-1, after receiving the user U _i request (h(ID _i ), E _i , CID _i , F _i ), the server S calculates:

${{\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; x</span>}<span\; class="notranslate">\; )</span>$

${{\mathrm{<span\; class="notranslate">\; N</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; \&CirclePlus;</span>{\mathrm{<span\; class="notranslate">\; E.</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}$

$\mathrm{<span\; class="notranslate">\; h</span>}{<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span>}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; CID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; x</span>}$

${{\mathrm{<span\; class="notranslate">\; D.</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; h</span>}{<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span>}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; the\; y</span>}<span\; class="notranslate">\; )</span>$

F _i ′=h(A _i ′||D _i ′||N _i ′)

In step 3-2, the server S compares whether F _i '=F _i is established, and if not, the server fails to authenticate the user, and the server rejects the user's login request. If it is established, the server completes the authentication of the user, and the server S selects a random number N' greater than 1024 bits and performs the following calculation:

SK'＝h(A _i '||D _i '||N _i '||N')

Wherein SK' is a symmetric encryption key on the server side between the server and the user.

Encryption using SK' yields:

Step 3-3, server S sends (G', N') to user U _i ;

Step 3-4, after receiving (G',N'), user U _i performs the following calculation:

SK _i ＝h(A _i ||D _i ||N _i ||N')

Where SK _i is the symmetric encryption key between the server and the user at the user end.

Use SK _i to decrypt: G _i = SK _i (G')

Step 3-5, user U _i authentication Whether it is established, if not, the user's identity authentication to the server fails, and the user is disconnected; if successful, the two-way identity authentication between the server and the user is completed.

In order to improve the use effect of the method of the present invention, the present invention can also complete user password modification, and the system allows users to freely change their own passwords without logging in to the server again. Suppose a user wishes to change his password to PW _new , then when he needs After entering the username (ID _i ) and password (PW _i ), follow the steps below:

Step 1, the smart card performs the following operations:

${\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; B</span>}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span>$

C _i =h(A _i );

Step 2, the smart card compares whether C _i =C is established, and if it is established, it proves the legal identity of the user U _i ;

Step 3, the user chooses a new password PW _new ;

Step 4, smart card calculation And replace B in the internal storage with B _new , so that the modification of the user password is completed.

Further, the personal information in step 1 includes date of birth, telephone number, address and signature.

Further, the integer in step 2-3 is greater than 1024 bits.

Compared with prior art, the beneficial effect of the present invention is:

(1) Compared with the traditional password authentication, the method proposed by the present invention can realize the function that the remote server does not store the user password. This greatly reduces the pressure on server data storage, and protects user data from being stolen on the server side. It not only protects user information, but also eliminates the hidden danger that the server will be responsible for losing user information.

(2) Compared with other password authentication schemes, the present invention realizes the confidentiality of user names and passwords in the registration stage, login stage, authentication stage and user password modification stage, is about to carry out encrypted transmission of user names and passwords, and improves the security of the whole system sex.

(3) Adding random numbers generated each time into the password authentication protocol of the present invention can effectively prevent replay attacks and information interception attacks, and increase the security of the entire system.

(4) The user can change the password at any time without applying to the server, which reflects the good user experience of the system.

Description of drawings

Fig. 1 is a registration information exchange diagram of the present invention.

FIG. 2 is a diagram of server authentication information exchange in the present invention.

Figure 3 is a diagram of authentication information exchange.

Figure 4 is an exchange diagram for users to modify their passwords.

Fig. 5 is a flowchart of the main steps of the present invention.

detailed description

The specific embodiment of the present invention will be further described in detail in conjunction with the accompanying drawings.

The goal that the present invention will realize is:

(1) The user password can be modified or deleted by the user.

(2) The user name and password are transmitted in cipher text.

(3) No one can log in as a certain user.

(4) The plaintext form of the user name and password cannot be obtained by the server-side personnel.

(5) The authentication system can resist attacks such as replay attack, password guessing attack and masquerading attack.

(6) The authentication system has high efficiency.

(7) If the smart card is lost, the attacker holding the smart card cannot log in to the system by guessing the password.

The present invention comprises following four steps:

Step 1, user registration stage. As shown in FIG. 1 , the user chooses a user name (ID) and a password (PW) that are convenient for the user to remember. After being encrypted by the smart card, it is sent to the server in the form of cipher text. The server calculates the corresponding security parameters using the server-side key and returns and stores them in the smart card.

Step two, the login phase. The user inserts the smart card into the terminal and enters his user name (ID) and password (PW). After the smart card processes the user login information, it compares it with the authentication information stored in itself to determine whether the user's identity is legal. If valid, the smart card calculates the corresponding security parameters and sends them to the server.

Step three, the authentication stage. As shown in Figures 2 and 3, the server processes the information sent by the smart card and verifies whether the user information is legal. If it is legal, the server encrypts the identity information and sends it to the smart card. The smart card processes the data and verifies whether the server information is legal. . If it is legal, the user login is completed, and the two establish a relationship. Step 4, the user password modification stage, as shown in FIG. 4 . At this stage, users are allowed to change their passwords by themselves.

Important terms and constraints:

Symmetric encryption algorithm: Symmetric algorithm (symmetric algorithm), sometimes called traditional encryption algorithm, is that the encryption key can be derived from the decryption key, and the decryption key can also be calculated from the encryption key. In most symmetric algorithms, the encryption key and decryption key are the same. Therefore, this encryption algorithm is also called a secret key algorithm or a single key algorithm. It requires the sender and receiver to agree on a key before communicating securely. The security of the symmetric algorithm depends on the key. Leaking the key means that anyone can decrypt the messages they send or receive, so the secrecy of the key is very important to the communication.

One-way hash function: One-way hash function, also known as one-way hash function and hash function, is a function that changes an arbitrarily long input message string into a fixed-length output string and it is difficult to obtain an input string from the output string. This output string is called the hash value of the message. A secure one-way hash function should at least meet the following conditions: (1) The input length is arbitrary; (2) The output length is fixed, and should be at least 128 bits long according to the current computing technology, so as to resist birthday attacks; (3) For each given input, it is easy to calculate the output, that is, the hash value; (4) Given the description of the hash function, it is computationally infeasible to find two different input messages hashed to the same value , or given a description of a hash function and a message chosen at random, it is computationally infeasible to find another message different from that message such that they hash to the same value.

XOR algorithm:

Exclusive or (xor) is a mathematical operator. It is applied to logical operations. The mathematical symbol for XOR is "⊕", and the computer symbol is "xor". Its algorithm is:

1.

2.

3.

4. can launch

5.

The specific steps of the present invention will be further described below.

Fig. 5 is a flowchart of the main steps of the present invention. After the user registers, he logs in, and then completes two-way authentication with the server, and can modify the password. The whole process is realized based on the combination of software and hardware of the smart card and password authentication. It is now described in detail as follows:

Step 1, user registration stage. At this stage, the registered user needs to apply for a smart card first, which stores various information of the user, such as date of birth, home address, mobile phone number and personal signature. Step 1, in the initial stage of user registration, user U _i can freely choose his user name (ID _i ) and password (PW _i ).

Step 2, the smart card uses the one-way hash function h() to encrypt the user name (ID _i ) and password (PW _i ), to obtain the information pair (h(ID _i ||PW _i ), h(ID _i )) and Send it to server S through a secure channel.

Step 3, the server S encrypts the sent user information using the one-way hash function h() and the server keys x and y to obtain:

$\mathrm{<span\; class="notranslate">\; A</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; x</span>}<span\; class="notranslate">\; )</span>$

$\mathrm{<span\; class="notranslate">\; B</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; A</span>}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span>$

C=h(A)

$\mathrm{<span\; class="notranslate">\; D.</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; the\; y</span>}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; .</span>$

Step 4, the server S returns (B, C, D) to the user U _i through a secure channel.

Step 5, the user U _i stores (B, C, D) in the smart card.

Step two, the login phase. When the user U _i logs in, he needs to insert the smart card into the corresponding device and input his user name (ID _i ) and password (PW _i ).

Step 1, the smart card invokes the stored information to calculate:

${\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; B</span>}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; ,</span>$

C _i =h(A _i )

In step 2, the smart card compares whether C _i =C is established, and if it is established, it proves the legal identity of the user U _i .

Step 3, the smart card randomly generates an integer N greater than 1024 bits and performs the following calculation:

${\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; N</span>}$

${\mathrm{<span\; class="notranslate">\; CID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; N</span>}$

F _i ＝h(A _i ||D _i ||N)

Step 4, the smart card sends the login request (h(ID _i ), E _i , CID _i , F _i ) to the server S.

Step three, the authentication stage. At this stage, the mutual authentication between the server and the user is realized. The main steps are as follows.

Step 1. After receiving the user U _i request (h(ID _i ), E _i , CID _i , F _i ), the server S calculates:

${{\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; x</span>}<span\; class="notranslate">\; )</span>$

${{\mathrm{<span\; class="notranslate">\; N</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; \&CirclePlus;</span>{\mathrm{<span\; class="notranslate">\; E.</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}$

$\mathrm{<span\; class="notranslate">\; h</span>}{<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span>}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; =</span>{\mathrm{<span\; class="notranslate">\; CID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; x</span>}$

${{\mathrm{<span\; class="notranslate">\; D.</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>\mathrm{<span\; class="notranslate">\; h</span>}{<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span>}^{<span\; class="notranslate">\; \&prime;</span>}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; the\; y</span>}<span\; class="notranslate">\; )</span>$

F _i ′=h(A _i ′||D _i ′||N _i ′)

Step 2, the server S compares whether F _i '=F _i is established, if not, the server fails to authenticate the user, and the server rejects the user's login request. If it is established, the server completes the authentication of the user, and the server S selects a random number N' greater than 1024 bits and performs the following calculation:

SK'＝h(A _i '||D _i '||N _i '||N')

Where SK' is a symmetric encryption key on the server side between the server and the user.

Encryption using SK' yields:

Step 3, the server S sends (G', N') to the user U _i .

Step 4, after receiving (G', N'), user U _i performs the following calculation:

SK _i ＝h(A _i ||D _i ||N _i ||N')

Where SK _i is the symmetric encryption key between the server and the user at the user end.

Use SK _i to decrypt: G _i = SK _i (G')

Step 5, user U _i verification Whether it is established, if not, the user's identity authentication to the server fails, and the user disconnects. If successful, the two-way authentication of the server and the user is completed.

Step 4, user password modification stage. The system allows users to freely change their passwords without having to log in to the server again. Suppose a user wants to change his password to PW _new , then he needs to enter the username (ID _i ) and password (PW _i ) and follow the steps below:

Step 1, the smart card performs the following operations:

${\mathrm{<span\; class="notranslate">\; A</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; =</span>\mathrm{<span\; class="notranslate">\; B</span>}<span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; |</span><span\; class="notranslate">\; |</span>{\mathrm{<span\; class="notranslate">\; PW</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span><span\; class="notranslate">\; \&CirclePlus;</span>\mathrm{<span\; class="notranslate">\; h</span>}<span\; class="notranslate">\; (</span>{\mathrm{<span\; class="notranslate">\; ID</span>}}_{\mathrm{<span\; class="notranslate">\; i</span>}}<span\; class="notranslate">\; )</span>$

C _i =h(A _i )

In step 2, the smart card compares whether C _i =C is established, and if it is established, it proves the legal identity of the user U _i .

Step 3, the user chooses a new password PW _new .

Step 4, smart card calculation and replace the internally stored B with B _new . In this way, the modification of the user password is completed.

Claims (5)

1. the command identifying method of a high security, it is characterised in that comprise the steps of

Step one, user's registration phase, in this stage, the user of registration needs first to file one sheet smart card, deposits in smart card Store up the personal information of user；

Step 1-1, at the initial phase of user's registration, user U_iCan be with his user name (ID of unrestricted choice_i) and password (PW_i)；Step 1-2, smart card uses one-way Hash function h () to user name (ID_i) and password (PW_i) be encrypted, obtain Information is to (h (ID_i||PW_i),h(ID_i)) and be sent to server S by the channel of a safety；

Step 1-3, server S uses one-way Hash function h () and server key x and the y user profile to sending over It is encrypted, obtains:

$A=h\left(h\right({\mathrm{ID}}_i)\&CirclePlus;x)$

$B=A\&CirclePlus;h\left({\mathrm{ID}}_i\right|\left|{\mathrm{PW}}_i\right)\&CirclePlus;h\left({\mathrm{ID}}_i\right)$

C=h (A)

$D=h\left(h\right({\mathrm{ID}}_i\left|\right|{\mathrm{PW}}_i)\&CirclePlus;y);$

Step 1-4, (B, C, D) is returned to user U by the channel of a safety by server S_i；

Step 1-5, user U_i(B, C, D) is stored in smart card；

Step 2, entry stage, user U_iDuring login, need insert in corresponding device by smart card and input his user name (ID_i) and password (PW_i)；

Step 2-1, smart card calls the information of storage and calculates:

$A_i=B\&CirclePlus;h\left({\mathrm{ID}}_i\left|\right|{\mathrm{PW}}_i\right)\&CirclePlus;h\left({\mathrm{ID}}_i\right),$

C_i=h (A_i)；

Step 2-2, smart card compares C_iWhether=C sets up, if set up, then demonstrates user U_iLegal identity；

Step 2-3, one Integer N of smart card stochastic generation is also done calculated as below:

$E_i=A_i\&CirclePlus;N$

${\mathrm{CID}}_i=A_i\&CirclePlus;h\left({\mathrm{ID}}_i\right|\left|{\mathrm{PW}}_i\right)\&CirclePlus;N$

F_i=h (A_i||D_i||N)；

Step 2-4, smart card is by logging request (h (ID_i),E_i,CID_i,F_i) it is sent to server S；

Step 3, authentication phase, this stage achieves being mutually authenticated of server and user, and key step is as follows:

Step 3-1, receives user U_iRequest (h (ID_i),E_i,CID_i,F_iAfter), server S calculates:

${A_i}^{\&prime;}=h\left(h\right({\mathrm{ID}}_i)\&CirclePlus;x)$

${N_i}^{\&prime;}=A_i\&CirclePlus;E_i$

$h{\left({\mathrm{ID}}_i\right|\left|{\mathrm{PW}}_i\right)}^{\&prime;}={\mathrm{CID}}_i\&CirclePlus;x$

${D_i}^{\&prime;}=h(h{\left({\mathrm{ID}}_i\left|\right|{\mathrm{PW}}_i\right)}^{\&prime;}\&CirclePlus;y)$

F_i'=h (A_i′||D_i′||N_i′)；

Step 3-2, server S compares F_i'=F_iWhether set up, if be false, then the server authentification failure to user, clothes The logging request of business device refusal user, if set up, then server completes the certification to user, and server S selects one at random Number N' also carries out calculated as below:

SK'=h (A_i'||D_i'||N_i'||N')

Wherein SK' is the symmetric cryptographic key of server end between server and user, uses SK' to be encrypted and obtains:

$G^{\&prime;}={\mathrm{SK}}^{\&prime;}({N_i}^{\&prime;}\&CirclePlus;N^{\&prime;});$

Step 3-3, (G', N') is sent to user U by server S_i；

Step 3-4, after receiving (G', N'), user U_iPerform calculated as below:

SK_i=h (A_i||D_i||N_i||N')

Wherein SK_iFor the symmetric cryptographic key of user side between server and user, use SK_iIt is decrypted and obtains: G_i=SK_i (G')；Step 3-5, user U_iCheckingWhether set up, if be false, then user's authentication to server Failure, user disconnects；If it succeeds, complete the bidirectional identity authentication of server and user.

The command identifying method of a kind of high security the most according to claim 1, it is characterised in that user can also be completed Password is revised, and system allows user freely to change the password of oneself without logging on server, it is assumed that a user wishes Hope his change of secret code to be PW_new, then need to input user name (ID at him_i) and password (PW_iFollowing steps are followed after):

Step 1, smart card performs to operate as follows:

$A_i=B\&CirclePlus;h\left({\mathrm{ID}}_i\right|\left|{\mathrm{PW}}_i\right)\&CirclePlus;h\left({\mathrm{ID}}_i\right)$

C_i=h (A_i)；

Step 2, smart card compares C_iWhether=C sets up, if set up, then demonstrates user U_iLegal identity；

Step 3, user selects a new password PW_new；

Step 4, smart card calculatesAnd the B of storage inside is replaced with B_new, so Then complete the amendment of user cipher.

The command identifying method of a kind of high security the most according to claim 1, it is characterised in that the individual in step one Information comprises date of birth, telephone number, address and signature.

The command identifying method of a kind of high security the most according to claim 1, it is characterised in that the integer in step 2-3 More than 1024bits.

The command identifying method of a kind of high security the most according to claim 1, it is characterised in that in step 3-2, N' is big Integer in 1024bits.