An efficient and User-Friendly Remote Password Authentication Scheme for Multi-Server Architecture

• Main Authors: Tzu-Chin Yang, 楊子慶
• Other Authors: Gwoboa Horng
• Format: Others
• Language: zh-TW
• Published: 2005
• Online Access: http://ndltd.ncl.edu.tw/handle/22427179018940258037

碩士 === 國立中興大學 === 資訊科學研究所 === 93 === Password authentication is used to validate the legal user to access the server and receive the server’s service. In addition, key agreement protocol is developed to provide the secure service communication between the communication parties. However, since the networks and information technology has grown quickly, most of services over networks are developed into a multi-server architecture. The traditional single–server password authentication schemes are no longer suitable for remote user authentication. Although some multi-server password authentication schemes had been proposed in past, but they need much computation cost and don’t provide security change password stage. In this thesis, we combine user password authentication with key agreement protocol to propose a new efficient solution for a multi-server environment. In the scheme, user only needs to register to the Register Center once and subsequently can retrieve services provided by different servers. Moreover, users can freely choose their own passwords. Furthermore, we also provide the change password stage such that user can use new password to login all servers. In addition, the proposed scheme adopts hash function and exclusive-or operation rather than cryptographic encryption, therefore its computation cost is very low.