格上基于智能卡的安全口令认证方案

基于智能卡的认证方案是一种高效且常用的认证机制,但安全性基于数论难题构建的相关认证方案存在不能抵抗量子攻击、恶意读卡器攻击等问题.提出一种新的格上基于智能卡的口令认证方案,该方案利用格密码中近似平滑投射哈希函数和可拆分公钥密码体制,通过用户口令和智能卡完成与服务器的身份认证和会话密钥协商.该方案在随机预言模型下满足理论可证明安全,在抵抗量子攻击、恶意读卡器攻击和其他类型攻击方面有较高的可靠度.仿真实验表明,所提方案执行效率高,满足实际应用需求.

Security password authentication scheme based on smart CARD from lattices

The authentication scheme based on smart card is an efficient and commonly used authentication mechanism, but most of the existing schemes whose security depends on the number theoretical hard problem can not resist quantum attacks and malicious card reader attacks. This paper proposed a novel password authentication scheme from lattices, which utilized an approximate smooth projective hash function and a splittable public-key encryption scheme in the lattice-based cryptosystem. It completed identity authentication and secure session key agreement between the server and user by password and smart card. The scheme satisfied the theoretical provably security in random oracle model. It had high reliability in resisting quantum attacks, malicious card reader attacks and other types of attacks. Simulation experiments show that the proposed scheme has high execution efficiency and meets the requirements of practical application.