題名: A Mutual Authenticated Key Agreement Scheme over Insecure Networks 作者: Chang, C. C.;Lee, C. Y.;Su, Y. W.
日期: 2007-10
上傳時間: 2009-12-17T06:57:57Z 出版者: Asia University
摘要: Authenticated password is extensively used to ensure controlled access to the service providers over insecure networks. Many existed password authentication schemes use timestamps to avoid replay attacks. In this article, we argue these existed schemes need extra synchronized time mechanisms. With the expected delay-time limitation, these schemes can be influenced by forgery attacks. Furthermore, the article proposes an enhanced scheme to avoid the possible attacks. Without timestamps, the enhanced scheme providers the feature of mutual authentication and session key agreement between the user and the server.