TWI428002B - Key exchange systems and methods for remote mutual identification - Google Patents

Description

Key exchange system and method for remote mutual identification

The present invention relates to a key exchange system and method, and more particularly to a key exchange system and method for remote mutual identification.

In today's Internet age where Internet technology is booming, both enterprise organizations (internal units), supply chain groups, and individual network users need to communicate with remote information devices (such as servers). The first level is the remote identification problem.

Considering (wireless) Internet scams, Phishing and other events emerge one after another, in order to allow users of (wireless) networks to confirm the identity of both parties to each other, in order to facilitate the interaction, so the relevant people have proposed many solutions. For example, in the case of the Republic of China Announcement Patent No. I288554 "One-time password generation and application method for online transactions, and a system for executing the method", the spirit of the method is that the system generates a random number function, and a transaction code is generated through operation. It does have many advantages. However, if the rule of the system random number is inferred, or if the system administrator can resist the temptation of human weakness, and the system parameters are outflowed, the security of the system may have different views. Therefore, it is necessary to seek a solution.

Accordingly, it is an object of the present invention to provide a method of password exchange for remote mutual identification.

Thus, the method for remotely recognizing a password exchange method of the present invention comprises the following steps: (A) a system center discloses a set of public keys; (B) a use The device registers with the system center with a user public key calculated from a secret key thereof and the set of public keys disclosed by the system center; and (C) the user device by The temporary identification number and the two-digit signature pair are transmitted to the system center for the login process.

Another object of the present invention is to provide a cryptographic exchange system for remote mutual identification.

Thus, the present invention is used for remotely mutual identification of a password exchange system comprising a system center and a user device. The system center is used to expose a set of public keys. The user device registers with the system center using a user public key calculated from a secret key thereof and the set of public keys disclosed by the system center, and by using a temporary identification number And two pairs of signatures are sent to the system center for the login process.

The invention has the effect that the user device transmits the temporary identification number and the two pairs of signature pairs to the system center to perform the login procedure, thereby improving the password exchange system and method technology for remote mutual identification of the present invention. Complexity and security protection.

The above and other technical contents, features and advantages of the present invention will be apparent from the following detailed description of the preferred embodiments.

Before the present invention is described in detail, it is noted that in the following description, similar elements are denoted by the same reference numerals.

Referring to FIG. 1, a preferred embodiment of the remote code exchange system 1 for remote mutual identification includes a system center 11, and a network 2 The user device 12 connected to the system center.

In addition to the system center 11 having to establish system center parameters in advance, the technology of the present invention can be roughly divided into registration, login, and verification stages. These system center parameters mainly contain a set of public keys and a set of system center secret keys. The group public key includes a first public key P, a second public key n and a third public key g, wherein the first public key P is about 1024 bits, P=4P ₁ P ₂ +1, P ₁ and P ₂ are all prime numbers. The second public key n=P ₁ P ₂ , and the third public key g is the original root of the modulo P whose order is n. The above P ₁ and P _{2 are} the system center secret keys of the group.

The user device 12 registers with the system center 11 using a user public key y calculated from the secret key x and the set of public keys P, n, and g disclosed by the system center 11, and The login procedure is performed by transmitting a temporary identification number m and two pairs of signature pairs (a, w ₁ ), (a, w ₂ ) to the system center 11. The temporary identification number m refers to a signature file or a time stamp that the user device 12 intends to remotely log in to the system center 11 .

The details of the steps of the preferred embodiment of the method for remotely identifying the password exchange method of the present invention will be described below with reference to Figs. First, as shown in step 31 of FIG. 2, the system center generates the set of public keys P, n, g, and the set of system center secret keys P ₁ , P ₂ , and the set of public keys P, n, g public.

Next, as shown in step 32, the user device 12 takes the formula The user public key y is calculated, where x is the secret key of the user device 12. Where x is a prime number, 1≦x≦n-1, and the bit length of x is between 760 and 800 bits.

Then, as shown in step 33, the user device 12 transmits its user public key y to the system center 11 through the secure conduit, so the system center 11 can accept the registration of the user device 12. Thus, the public key y of the user device 12 can be arranged by the system center 11 and uniformly placed on the network 2 where other users can browse.

Next, as shown in step 34, the user device 12 calculates two according to the following formulas (1)-(5) according to the temporary identification number m of the user device 12 and a random random number a and another random random number t ₁ . Pair of digital signature pairs (a, w1), (a, w2): m≡axT ₁ + t ₁ w ₁ (mod n) (1)

Axm≡(ax) ² T ₂ +axt ₁ w ₂ (mod n) (2)

≡g ^ax (mod p) (4)

Then, as shown in step 35, the user device 12 transmits the temporary identification number m and the digital signature pair (a, w ₁ ), (a, w ₂ ) to the system center 11 to perform the login procedure.

Then, as shown in step 36, the system center 11 verifies whether the temporary identification number m and the two-digit signature pair (a, w1), (a, w2) are indeed the same by the following formulas (6)-(7). The user device 12 issues:

In the above step 36, if the above formulas (6)-(7) are true, the system center 11 accepts the login request of the user device 12, otherwise it is returned, and is ignored. meeting.

In addition, since the system center 11 knows the factor of n to decompose the secret, that is, the system center 11 knows the parameters P ₁ and P ₂ , the system center 11 can solve the value of a according to a ² in the equation (7). Therefore, during the remote authentication, both the system center 11 and the user device 12 can communicate according to the value of a, so as to avoid the user device 12 from using the fixed secret key x, which is easy to be used by the hacker. The possibility of cracking.

In summary, in the key exchange system and method for remote mutual identification of the present invention, since the user device uses the formula Calculating the user public key y, and combining the temporary identification number m with the two pairs of signature pairs (a, w ₁ ), (a, w ₂ ) calculated by the random random number a and the associated algorithm formula It is transmitted to the system center 11 to perform the login process, thereby improving the complexity of the system and the security protection effect, so that the object of the present invention can be achieved.

The above is only the preferred embodiment of the present invention, and the scope of the invention is not limited thereto, that is, the simple equivalent changes and modifications made by the scope of the invention and the description of the invention are All remain within the scope of the invention patent.

1‧‧‧Crystal exchange system for remote mutual identification

11‧‧‧System Center

12‧‧‧User device

2‧‧‧Network

31~36‧‧‧Steps

1 is a system architecture diagram illustrating a preferred embodiment of a remote mutual identification key exchange system of the present invention; and FIG. 2 is a flow chart illustrating a preferred implementation of the remote mutual identification key exchange method of the present invention. example.

31~36‧‧‧Steps

Claims (10)

A method for password exchange for remote mutual identification, comprising the steps of: (A) a system center discloses a set of public keys; (B) a user device to be disclosed from a secret key thereof and the system center The set of public key calculated by the set of public keys is registered with the system center; and (C) the user device transmits a temporary identification number and two pairs of signature pairs to the system center, To log in. A method for remotely recognizing a password exchange according to claim 1, wherein in the step (A), the set of public keys includes a first public key P and a second public key. And a third public key g, wherein the first public key P is about 1024 bits, P=4P ₁ P ₂ +1, P ₁ and P ₂ are all prime numbers, and the second public key n= P ₁ P ₂ , and the third public key g is the original root of the modulo P whose order is n. According to claim 2, the method for password exchange for remote mutual identification, wherein in the step (B), the user device is based on the following formula, according to its secret key x and the system center The group public key g, P is disclosed, and the user public key y is calculated: The secret key x of the user device is a prime number, 1≦x≦n-1, and the bit length of x is between 760 and 800 bits. The method for exchanging passwords for remote mutual identification according to claim 3, wherein in the step (C), the user device is based on the following formula, according to the temporary identification number m of the user device and Calculating the two pairs of signature pairs (a, w ₁ ), (a, w ₂ ): m≡axT ₁ + t ₁ w ₁ (mod n); a random random number a and another random random number t ₁ ; And axm≡(ax) ² T ₂ +axt ₁ w ₂ (mod n), wherein ≡g ^ax (mod p); and According to the password exchange method for remote mutual identification described in item 4 of the patent application scope, after the step (C), the system center is further included to verify the temporary identification number m and the two pairs of digits by using the following formula: Whether the pair (a, w ₁ ), (a, w ₂ ) is indeed issued by the user device: ;and A password exchange system for remote mutual identification, comprising: a system center for disclosing a set of public keys; a user device utilizing a set of public funds disclosed from a secret key thereof and the system center The key calculates a user public key, registers with the system center, and performs a login procedure by transmitting a temporary identification number and a two-digit signature pair to the system center. A remote key exchange system for remote mutual identification according to claim 6, wherein the set of public keys includes a first public key P, a second public key n, and a third public key. g, wherein the first public key P is about 1024 bits, P=4P ₁ P ₂ +1, P ₁ and P ₂ are all prime numbers, and the second public key n=P ₁ P ₂ , and the first The three public key g is the original root of the modulo P whose order is n. A remote code exchange system for remote mutual identification according to claim 7, wherein the user device is based on the secret key x and the set of public keys g disclosed by the system center according to the following formula , P, calculate the user public key y: The secret key x of the user device is a prime number, 1≦x≦n-1, and the bit length of x is between 760 and 800 bits. The password exchange system for remote mutual identification according to item 8 of the patent application scope, wherein the user device is based on the following formula, according to the temporary identification number m of the user device and a random random number a and another The random number t _{1 is} calculated, and the two pairs of signature pairs (a, w ₁ ), (a, w ₂ ) are calculated: m≡axT ₁ + t ₁ w ₁ (mod n); and axm≡(ax) ² T ₂ +axt ₁ w ₂ (mod n), where ≡g ^ax (mod p); and The password exchange system for remote mutual identification according to claim 9 of the patent application scope, wherein the system center verifies the temporary identification number m and the pair of two digit signatures (a, w ₁ ) by using the following formula, Whether (a, w ₂ ) is actually issued for the user device: ;and