Design and Implementation of Password-based Identity Authentication System

摘要：

The main weakness of passwords is that it is vulnerable to dictionary attacks implemented by automated programs. As the EKE protocol could resist the offline dictionary attack and the CAPTCHA could avoid automatic on-line dictionary attack implemented by the attacker, in this paper, based on the two protocols, we proposed the hybrid password authentication protocols. Our new password authentication schemes combined the advantages of the EKE protocol and the CAPTCHA, which can resist the dictionary attacks implemented by the automatic programs perfectly. Finally, we gave the realization of the password authentication protocol, in which the reverse Turing test is realized by the common graphical verification code.

关键词： password identity authentication dictionary attacks EKE protocol CAPTCHA

作者: Shuo Zhai Tao He

作者单位: School of Computer, China University of Mining and Technology Xuzhou, China

会议类型: 国际会议

会议名称: The 2010 International Conference on Computer Application and System Modeling(2010计算机应用与系统建模国际会议 ICCASM 2010)

会议地点: 太原

会议语种:英文

页码: 253-257

在线出版日期: 2010-10-22（万方平台首次上网日期，不代表论文的发表时间）