분할된 패스워드 기반 인증된 키교환 프로토콜

국문 초록 (Abstract)

본 논문은 신뢰할 수 없는 네트워크를 통해서도 사용자를 인증하고 안전한 암호통신용 세션키 교환에 적합한 패스워드 기반 인증 프로토콜을 제안한다. 기본 아이디어는 패스워드를 분할한 후 각 분할된 패스워드 지식들을 확대(amplification)하는 구조로 설계하는 것으로서, 이는 패스워드 검증정보의 램덤성(randomness)을 증가시키기 위한 것이다. 또한 서버 검증자 파일을 암호화하여 보관함으로서 서버 파일 타협에 의한 오프라인 사전추측 공격에 강인하도록 구성한다. 더불어 검증자 파일 및 서버의 암호화 키가 다수의 서버들에게 분산되도록 설계된 방식을 제안한다.

다국어 초록 (Multilingual Abstract)

This paper presents a password based authentication and key exchange protocol which can be used for both authenticating users and exchanging session keys for a subsequent secure communication over an untrusted network. Our idea is to increase a randomness of the password verification data, i.e., we split the password, and then amplify the split passwords in the high entropy-structured password verification data. And in order to prevent the verifier-compromised attack, we construct our system such that the password verification data is encrypted with the verifier's key and the private key of verifier used to encrypt it is stored in a secure place like a smart cards. Also we propose the distributed password authentication scheme utilizing many authentication servers in order to prevent the server-compromised attack occurred when only one server is used. Furthermore, the security analysis on the proposed protocol has been presented as a conclusion.

목차 (Table of Contents)

• 요약
• ABSTRACT
• Ⅰ. 서론
• Ⅱ. 분할된 패스워드 기반 인증된 키교환 프로토콜
• Ⅲ. 비밀분산을 이용한 패스워드 기반 인증 및 키교환
• Ⅳ. 제안된 방식의 보안분석 및 효율성 분석
• Ⅴ. 결론
• 참고문헌
• 〈著者紹介〉

참고문헌 (Reference)

1 "다중서버를 이용한 인증된 키교환 프로토콜" 13 (13): 87-98, 2003

2 "Wallet databases with observer" (740) : 1992

3 "Ultimate Solution to Authentication via Memorable Password" 2000

4 "Threshold Password-Authenticated Key Exchange" 369-384, 2002

5 "The decision Diffie-Hellman problem," 48-63, 1998

6 "The AuthA protocol for password-based authenticated key exchange" 2000

7 "Simplified VSS and Fast- track Multiparty Computations with Application to Threshold Cryptography" 101-111, 1998

8 "Server-Assisted Generation of a Strong Secret from a Password" 2000

9 "Secure remote password protocol" 97-111, 1998

10 "Secure Network Authentication with Password Identification" 1999

11 "Robust Threshold DSS Signatures" 354-371, 1996

12 "Refinement and Improvement of Virtual Software Token Protocols" 8 (8): -1, 2004

13 "Provably Secure Password Authenticated Key Exchange Using Diffie-Hellman" 156-171, 2000

14 "Intrusion Tolerant Password-Enabled PKI" 2002

15 "Handbook of applied cryptography" CRC Press inc. 618-, 1997

16 "Encryted key exchange" 72-84, 1992

17 "Diffie- Hellman, Decision Diffie-Hellman, and Discrete Logarithms" 327-, 1998

18 "Authentication and key agreement via memorable passwords" 2001

19 "Authenticated Key Exchange Secure Against Dictionary Attack" 139-155, 2000

20 "Authenticated Diffie-Hellman Key Agreement Protocols" 339-361, 1998

21 "An efficient password-based protocol for authenticated key exchange" 324-335, 2003

22 "Addendum to Summary of AMP" 2003

23 "A New Approach to Efficient Verifiable Secret Sharing for Threshold KCDSA" 208-220, 1999