臺灣博碩士論文加值系統

隨著電腦資訊的普及，網路上提供各種服務正迅速融入我們的日常生活中，人們常常透過電腦、網際網路從事各種溝通、交易傳輸，對於使用者而言，只要在家中利用個人電腦或是在外利用公眾電腦，透過網際網路連結，即可藉由遠端登入來存取遠端系統的資源，而利用智慧卡來幫助人們登入遠端系統是最常用的一種方法。自從1981年開始，Lamport提出使用者遠端確認機制之後，有許多的學者提出改進的方法，增加使用者遠端確認機制的安全與效率。在2005年，Lu和Cao提出基於二次剩餘的改進架構，在Lu-Cao的架構中，雖然不需要在系統中存放通行碼的驗證表，但是沒辦法讓使用者自行選擇自己的通行碼，且效率不佳，運算過於複雜。本文提出改進Lu和Cao學者所提出的架構，使得智慧卡之使用者遠端確認機制更有效率，並且更為安全。

摘要 - 1 -
第一章 研究背景與動機 - 2 -
第二章 研究目的 - 4 -
第三章 文獻探討 - 5 -
3.1. 身分認證協定的相關介紹 - 5 -
3.1.1. 身分認證方法介紹 - 5 -
3.1.2. 通行碼確認系統 - 6 -
3.1.3. 通行碼分類 - 9 -
3.2. 智慧卡的介紹 - 11 -
3.3. 攻擊法介紹 - 13 -
3.4. 智慧卡之使用者認證機制的發展階段 - 15 -
3.5. 雜湊函數 (Hash Function) - 16 -
3.6. 二次剩餘(Quadratic Residue) - 17 -
3.7. Hwang-Li智慧卡機制 - 20 -
3.8. Lu-Cao智慧卡之使用者確認機制 - 23 -
第四章 本文的智慧卡之使用者確認機制 - 27 -
第五章 安全性分析 - 30 -
5.1. 安全度分析 - 30 -
5.2. 功能比較 - 32 -
5.3. 效率分析比較 - 34 -
第六章 結論與未來研究方向 - 36 -

[1]吳永川，林秀峰，陳志瀅，A Fair and Dynamic Password Authentication System, Communication of the CCISA, 2006, pp. 222-228.
[2]Chang C.C., Hwang K.F., Some forgery attacks on a remote user authentication scheme using smart cards, Informatica, Vol. 14, No. 2, 2003, pp. 289-294.
[3]Chang C.C., Wu L.H., A new password authentication scheme, Journal of Information Science and Engineering, Vol. 6, No. 2, 1990, pp. 139-147.
[4]Chen C.K., Cheng L.M., Cryptanalysis of a remote user authentication scheme using smart cards, IEEE Transactions on Consumer Electronics, Vol. 46, No. 4, 2000, pp. 992-993.
[5]Harn L., Hwang D., Laih C.S., Password authentication using public-key cryptography, Computer and Mathematics with Applications, Vol. 18, No. 12, 1989, pp. 1001-1017.
[6]Hwang T.Y., Passwords authentication using public-key encryption, International Carnahan Conference on Security Technology, 1983, pp. 35-38.
[7]Hwang M.S., Li L.H., A new remote user authentication scheme using smart cards, IEEE Transactions on Consumer Electronics, Vol. 46, No. 1, 2000, pp. 28-30.
[8]Juang W.S., Efficient password authenticated key agreement using smart cards, Computers & Security, Vol. 23, No. 2, 2004, pp. 167-173.
[9]Lamport L., Password authentication with insecure communications, Communication of ACM, Vol. 24, No. 11, 1981, pp. 770-772.
[10]Lee N.Y., Chiu Y.C., Improved remote authentication scheme with smart card, Computer Standards & Interfaces, Vol.27, No. 2, 2005, pp. 177-180.
[11]Lennon R., Matyas S., Meyer C., Cryptographic authentication of time-invariant quantities, IEEE Transactions on Communications, Vol. COM-29, No. 6, 1981, pp. 773-777.
[12]Liew H.T., Lin J.F., Wu C.W., An efficient and complete remote user authentication scheme using smart card, Mathematical and Computer Modelling, Vol. 44, No. 1-2, 2006, pp. 223-228.
[13]Lin C.L., Sun H.M., Hwang T., Attacks and solution on strong-password authentication, IEICE Transactions on Communications, Vol. E84-B, No. 9, 2001, pp. 2622-2627.
[14]Lu R., Cao Z., Efficient remote user authentication scheme using smart card, Computer Networks, Vol. 49, No. 6, 2005, pp. 535-540.
[15]Purdy G.B., High security log-in procedure, Communications of the ACM, Vol. 17, No. 8, 1974, pp. 442-445.
[16]Shimizu A., A dynamic password authentication method by one-way function, SYST. COMP. , Vol. 22, No. 7, 1991, pp. 32-40.
[17]Sun H.M., An efficient remote use authentication scheme using smart card, IEEE Transactions on Consumer Electronics, Vol. 46, No. 4, 2000, pp. 958-961.
[18]Tsuji T., Shimizu A., One-time password authentication protocol against theft attacks, IEICE Transactions on Communications, Vol. E87-B, No. 3, 2004, pp. 523-529.
[19]Wu S.T. , Chieu B.C., A user friendly remote authentication scheme with smart cards, Computer and Security, Vol. 22, No. 6, 2003, pp. 547-550.