臺灣博碩士論文加值系統

隨著網際網路的興起與科技發展的日新月異，網路已經漸漸成為生活的必需品。由於網路的世界彼此看不到對方又不安全，確認對方的身分與傳送訊息的安全就變得十分的重要了，所以就有身分確認與金鑰交換的機制來達到此目的。
通行碼認證機制是最常使用的身分確認機制，因為它簡單、方便，但通行碼認證機制卻有猜測攻擊的問題，因此就研究將通行碼加以限制，但卻帶了使用上的不方便的問題；而現今金鑰交換機制大都使用非對稱式密碼系統來完成，這對於運算能力不佳的機器將是一個沉重的負擔，然而使用對稱式密碼系統卻有金鑰管理的問題。因此本篇論文將提出一個使用智慧卡的雙向認證機制，以對稱式密碼系統為基礎，完成金鑰的交換，既能免除使用非對稱式密碼系統的高運算量問題，亦解決了對稱式密碼系統金鑰管理的問題，並且讓使用者能自由且方便的選擇與改變通行碼。

With current information technology, Internet has become a necessity in our daily life. Because of the openness of Internet, user authentication and information safety become important issues on the various applications of Internet.
The most commonly used user authentication scheme is password authentication scheme because of its simplicity and convenience. However, this mechanism is vulnerable on the protection of guessing attacks, which consequently results in many restrictions on password applications. On the other hand, because symmetric cryptosystem requires the need of key management, most current key exchange schemes are built by asymmetric cryptosystem that unfortunately consumes much computation cost. With the use of smart card, this thesis proposes a mutual authentication scheme that changes keys based on symmetric code system to not only avoid high computation cost in asymmetric cryptosystem but also solve the problem of key management in symmetric cryptosystem. Only one variable is required to be carefully stored in the server for all users. The proposed scheme also allows users to choose and change password freely and conveniently.

中文摘要 i
英文摘要 ii
誌 謝 iii
目 錄 iv
圖表索引 vi
第一章 緒論 1
1.1 前言 1
1.2 研究目的 2
1.3 論文大綱 4
第二章 資訊安全與身份認證機制 5
2.1背景知識 5
2.1.1安全服務 6
2.1.2智慧卡 6
2.1.3對稱式密碼系統 9
2.1.4非對稱式密碼系統 15
2.1.5對稱式密碼系統與非對稱密碼系統之比較 19
2.1.6單向雜湊函數（One-Way Hash Function） 21
2.1.7金鑰交換 26
2.1.8身分確認 27
2.1.9與身分識別相關之攻擊 28
2.2身份認證機制相關研究 31
第三章有效的雙方認證與金鑰交換機制 46
3.1 簡介 46
3.2 系統模式 50
3.3 方法描述 52
3.3.1 註冊階段 52
3.3.2 登入階段 54
3.3.3 驗證階段 55
第四章 安全與效能之分析 58
4.1使用便利性--對與使用者而言 58
4.2使用便利性--對於遠端伺服器而言 59
4.3安全性分析 61
4.4效能分析 70
第五章 結論及未來展望 78
5.1 結論 78
5.2 未來展望 80
參考文獻 81
作者簡介 85

[1] C. Kaufman, R. Perlman and M. Speciner, Network Security: Private Communication in a Public World, 2nd Edition, Prentice Hall PTR, New Jersey, 2002.
[2] W. Diffie and M. E. Hellman, “New Directions in Cryptography,” IEEE Transactions on Information Theory, vol. 22, pp. 644–654, Nov. 1976.
[3] B. Schneier, Applied Cryptography 2nd Edition, John Wiley & Sons Inc., New York, 1996.
[4] 巫坤品, 曾志光譯, 密碼學與網路安全—原理與實務第二版, 碁峯資訊股份有限公司, 民90.
[5] M. Bellare, D. Pointcheval and P. Rogaway, “Authenticated Key Exchange Secure against Dictionary Attacks,” In Eurocrypt 2000(LNCS 1807), pp. 139–155, 2000.
[6] V. Boyko, P. MacKenzie and S. Patel, “Provably Secure Password Authentication and Key Exchange Using Diffie-Hellman,” In Eurocrypt 2000(LNCS 1807), pp. 156–171, 2000.
[7] D. Jablon, “Strong Password-Only Authenticated Key Exchange,” ACM Computer Communication Review, vol. 26, pp. 5–20, Oct. 1996.
[8] J. Katz, R. Ostrovsky and M. Yung, “Practical Password-Authenticated Key Exchange Provably Secure under Standard Assumptions,” In Eurocrypt 2001(LNCS 2045), pp. 475–494, 2001.
[9] P. MacKenzie, S. Patel and R. Swaminathan, “Password Authenticated Key Exchange Based on RSA,” In Asiacrypt 2000(LNCS 1976), pp. 599–613, 2000.
[10] C. L. Lin and T. Hwang, “A Password Authentication Scheme with Secure Password Updating,” Computers & Security, vol. 22, pp. 68–72, Jan. 2003.
[11] D. Mcelroy and E. Turban, “Using Smart Cards in Electronic Commerce,” International Journal of information management, vol. 18, pp. 61–72, Jan. 1998.
[12] L. Lamport, “Password Authentication with Insecure Communication,” Communications of ACM, vol. 24, pp. 770–772, Nov. 1981.
[13] A. J. Evans, W. Kantrowitz and E. Weiss, “A User Authentication System not Requiring Secrecy in the Computer,” Communications of the ACM, vol. 17, pp. 437–442, Aug. 1974.
[14] R. E. Lennon, S. M. Matyas and C. H. Mayer, “Cryptographic Authentication of Time-Invariant Quantities,” IEEE Transactions on Communications, vol. 29, pp. 773–777, Jun. 1981.
[15] P. Peyret, G. Lisimaque and T. Y. Chua, “Smart Cards Provide Very High Security and Flexibility in Subscribers Management,” IEEE Transactions on Consumer Electronics, vol. 36, pp. 744–753, Aug. 1990.
[16] C. C. Chang and T. C. Wu, “Remote Password Authentication with Smart Cards,” IEE Proceedings E, vol. 138, pp. 165–168, May. 1991.
[17] C. C. Chang and C. S. Liah, “Remote Password Authentication with Smart Cards,” IEE Proceedings E, vol. 139, pp. 372–372, Jul. 1992.
[18] C. C. Chang and W. Y. Liao, “A Remote Password Authentication Scheme Based upon ElGamal’s Signature Scheme,” Computer & Security, vol. 13, pp. 137–144, 1994.
[19] T. C. Wu, “Remote Login Authentication Scheme Based on a Geometric Approach,” Computer Communications, vol. 18, pp. 959–963, Dec. 1995.
[20] T. C. Wu and H. S. Sung, “Authentication Passwords over an Insecure Channel,” Computer & Security, vol. 15, pp. 431–439, 1996.
[21] S. J. Wang and J. F. Chang, “Smart Card Based Secure Password Authentication Scheme,” Computers & Security, vol. 15, pp. 231–237, 1996.
[22] S. M. Yen and K. H. Liao, “Shared Authentication Token Secure against Replay and Weak Key Attack,” Information Processing Letters, vol. 62, pp. 78–80, Apr. 1997.
[23] M. S. Hwang, “Cryptanalysis of a Remote Login Authentication Scheme,” Computer Communications, vol. 22, pp. 742–744, May. 1999.
[24] K. Tan and H. Zhu, “Remote Password Authentication Scheme Based on Cross-Product,” Computer Communications, vol. 18, pp. 390–393, Mar. 1999.
[25] M. S. Hwang, “A Remote Password Authentication Scheme Based on the Digital Signature Method,” International Journal of Computer & Mathematics, vol. 70, pp. 657–666, 1999.
[26] W. H. Yang and S. P. Shieh, “Password Authentication Schemes with Smart Cards,” Computers & Security, vol. 18, pp. 727–733, 1999.
[27] M. S. Hwang and L. H. Li, “A New Remote User Authentication Scheme Using Smart Cards,” IEEE Transactions on Consumer Electronics, vol. 46, pp. 28–30, Feb. 2000.
[28] H. M. Sun, “An Efficient Remote Use Authentication Scheme Using Smart Cards,” IEEE Transactions on Consumer Electronics, vol. 46, pp. 28–30, Nov. 2000.
[29] 吳育展, “以智慧卡為基礎的密碼驗證架構之研究與其應用,”碩士論文, 逢甲大學資訊工程學系,民91.
[30] M. S. Hwang, C. C. Lee and Y. L. Tang, “A Simple Remote User Authentication Scheme,” Mathematical and Computer Modeling, vol. 36, pp. 103–107, Jul. 2002.
[31] H. Y. Chien, J. K. Jan and Y. M. Tseng, “An Efficient and Practical Solution to Remote Authentication: Smart Card,” Computers & Security, vol. 21, pp. 372–375, Aug. 2002.
[32] J. J. Hwang and T. C. Yeh, “Improvement on Peyravian-Zunic''s Password Authentication Schemes,” IEICE Transactions on Communications, vol. E85-B, pp. 823–825, Apr. 2002.
[33] C. L. Lin and T. Hwang, “A Password Authentication Scheme with Secure Password Updating,” Computers & Security, vol. 22, pp. 68–72, Jan. 2003.
[34] H. Y. Chien, J. K. Jan and Y. M. Tseng, “Impersonation Attack on Tan-Zhu''s Remote Login Scheme,” Electronics Letters, vol. 36, pp. 1202–1203, Jul. 2000.
[35] W. Rankl, W. Effing and R. Wolfgang, Smart Card Handbook, John Wiley & Sons, New York, 1997.
[36] 楊中皇, 蔡金鳳, “新一代對稱式密碼學演算法於智慧卡上的具體實現,”第十一屆全國資訊安全會議,pp. 199–206, 2001.
[37] Hitachi Single-Chip Microcomputer H8/3113 Hardware Manual, Hitachi Ltd.,1998.http://www.hitachi.co.jp/Sicd/English/Products/micom/ 300micome.htm.
[38] National Institute of Standards and Technology, Federal Information Processing Standard (FIPS) 46-3, Data Encryption Standard, Oct. 25, 1999, http://csrc.nist.gov/fips/fips46-3.pdf.
[39] J. Demen and V. Rijmen, “The Rijndael Block Cipher,” Document Version 2, March 1999, http://www.esat.kuleuven.ac.be/~rijmen/rijndael.
[40] NIST, Draft FIPS for the Advanced Encryption Standard (AES), http://csrc.nist.gov/publications/drafts/dfips-AES.pdf, Feb. 28, 2001.
[41] “Elloptic Curve Cryptosystems,” Certicom White Paper.
[42] E. Mohammed, A. E. Emarah and K. El-Shennawy, “Elliptic Curve Cryptosystems on Smart Cards,” IEEE 35th International Carnahan Conference on Security Technology, pp. 16–19, Oct. 2001.
[43] D. A. Menasc''e and A. Harbitter, “A methodology for analyzing the performance of authentication protocols,” ACM Transactions on Information and System Security, vol. 5, pp. 458–491, Nov. 2002.
[44] http://www.eskimo.com/~weidai/benchmarks.html