关键词: 身份认证, Rabin体制, 口令猜测攻击, 服务器伪装攻击, BAN逻辑

Abstract: Identity authentication is the precondition for secure communication between the client and the server. Kim and Chung presented a mutual authentication scheme for client/server scene. The authors realized the mutual authentication with the lower computational cost. Based on the security analysis in this paper, it finds Kim-Chung scheme is not secure because of the off-line password guessing attack, unlimited on-line password guessing attack and server impersonation attack. To solve these security problems, it improves this protocol and discusses the security and efficiency of the novel scheme, it also proves the correctness of the protocol using BAN logic.

Key words: identity authentication, Rabin cryptosystem, password guessing attack, server impersonation attack, BAN logic