Method of designing password-based authentication and key...

Details Method of designing password-based authentication and key... Method of designing password-based authentication and key...

H - Electricity

04

L

H04L 9/28 (2006.01) H04L 9/32 (2006.01)

Patent

CA 2388906

A protocol designing method that securely performs a password-based authentication and key exchange protocol using a zero-knowledge interactive proof is disclosed. According to this method, various kinds of system parameters required for authentication are first set. Then, a user selects a certain random number in conformity with the set parameters, and sends to a server a message including a user ID, a test number A applying a one-way function, and a first question number generation value X known only to the server and the user. The server, using the message sent from the user, sends to the user a message including an authentication Auth of whether the server possesses a public key, and a second question number generation value Y known only to the server and the user. The user authenticates the server by verifying the authentication Auth, and computes a resultant value c of a secret coin tossing known only to the server and the user and a session key SK. Thereafter, the user sends to the server a witness number B for user authentication. The server that stores a password verifier V for the respective user verifies the witness number B using the value c, and exchanges the session key SK by computing the session key SK. Accordingly, a secure authentication and key exchange can be performed only using the password without the necessity of any tool such as a smart card.

Affiliated with

Also associated with

Rating

Method of designing password-based authentication and key... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method of designing password-based authentication and key..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method of designing password-based authentication and key... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFCA-PAI-O-1829633