南京理工大学学报（自然科学版）2019，Vol.43Issue(1)：41-47,7.DOI:10.14177/j.cnki.32-1397n.2019.43.01.006
基于生物统计信息的多因子远程身份验证协议
Research of multiple factor remote authentication protocol based on biometric information
摘要
Abstract
To improve the security of remote identity authentication in multiple server environment,a multiple-factor authentication protocol including biometric information, elliptic curve cryptography and smart card is proposed. The protocol consists of six stages:setting stage,server registration stage, user registration phase,login stage,verification phase and password change stage. In the registration stage,the application of the fuzzy validator is adopted to convert the biometric template for random string,so as to avoid the effect of noise of biometric templates. On the login stage,elliptic curve cryp-tography( ECC) multiplication is used, which significantly reduces the cost of the bilinear pairing computation. BAN logic proves that the protocol can achieve secure session key agreement and two-way authentication. The protocol security analysis shows that the proposed protocol can resist many common security attacks, and the overall computation cost of registration and login phase is low.关键词
远程身份验证/生物统计信息/椭圆曲线密码/智能卡/BAN逻辑Key words
remote identity authentication/biometric information/elliptic curve cryptography/smart card/ban logic分类
信息技术与安全科学引用本文复制引用
岳静,邓利红..基于生物统计信息的多因子远程身份验证协议[J].南京理工大学学报（自然科学版）,2019,43(1):41-47,7.基金项目
陕西省教育厅专项科研计划项目(17JK0397) （17JK0397）
