WO2007065348A1

WO2007065348A1 - A key digital authentication method using one-time variable

Info

Publication number: WO2007065348A1
Application number: PCT/CN2006/003276
Authority: WO
Inventors: Ren Liu
Original assignee: Liu, Jinhong
Priority date: 2005-12-05
Filing date: 2006-12-05
Publication date: 2007-06-14
Also published as: CN1980124A

Abstract

A key digital authentication method, particularly a key digital authentication method which utilizes one-time variable when a message is authenticated by using a message authentication code. The one-time variable of the invention should be saved for its range and use state; the calculation of the message authentication code must be made by using the one-time variable together with the message; when the message is authenticated, not only the message authentication code but also the one-time variable used together and its use state must be authenticated; after the one-time variable is used, its use state must be marked and saved; for a specific key and an authentication function, the one-time variable is used only once to authenticate the same message effectively. The invention can accurately, simply, conveniently and effectively achieve an integrality and freshness of authenticating message, and exclusiveness of message authenticate by using one-time variable; and it can effectively achieve identity authentication by using one-time variable synchronously; besides simplifying authentication process and authentication protocol, it can increase the safety and make some complicated authentication application to achieve easily.

Description

Digital method using one-time delivery

This solution involves information security in the field of information security to conquer all identities, information integrity and freshness. Background wood

Identity methods usually have identities, or signatures. Methods are usually manual and can be easily counterfeited to distinguish between non-inconvenient and inconvenient exchanges of information. Usually, digital and digital information exchanges are not required.

Many of the previous users often used user D and their passwords easily to be spoofed.

Digital information usually uses the message AC or Lin as the message and the message is combined to generate a fixed degree. AC represents the message of the algorithm. Communication can use shared messages to generate messages AC to compare the messages and messages AC receive and receive with the AC received by the AC if they are the same

Message Integrity The recipient may not modify the message.

2 Definitely generate this message Anything that doesn't have the third impossible to generate A

3 If the message contains a sequence, the receiver can believe that the message sequence is "" The integrity of the message can also be achieved using digital signatures.

In order to prevent the message can use the same or use the transaction attached to the message together to receive the same or the transaction can be the new message of the message, you can also believe the self-protected identity of the message.

The use of the same generally requires the synchronization of the rest, but not directly with any rest can be used by other masters to refresh the news. It is not only that it is usually effective, as long as it is effective in the garden, it will accept its freshness.

This It is the use of the value of the rest of the time and the message together to generate a message-Jiexiu can only be the freshness of the message that it produces. This program is close to or related to the wood

News AAC news and.

The message is a fixed-degree or Lin-made message sum using arbitrary input of the message. references

1. "Engineering Guide"

Author SeveB e Sephe Pa e

Zhe Gu Yongbin Zhang Zhen Li Dequan et al

Publishing University Publishing

2. "Sheep, Algorithm C"

Author B ceSc ee

By Shi Zhong etc.

Publishing and publishing

3. "Safety"

Author

Publishing University Publishing

4. "A safe one skill wood"

Author Wang Yumin Tong Zhu

Publishing University Press Content

The main problem to be solved is the security of information, including security identity, integrity of information, newness and uniqueness of information.

The digital information methods commonly used in the field of information security are mainly messages AC or AC or digital signatures. The method can not understand the integrity of the message but The freshness of the message and the identity of the informant usually need to combine or prevent the message. But the need for the same synchronization and not the only unique role can not only the freshness of the message but also the specific homogeneity of the message, and only by the rest can each effect only the freshness of the messages that they produce. The same sum value method can make the message fresh but needs to increase communication in it or it needs to consume more and make the message not easy only.

This wooden scheme is usually used in the use of sharing, you can also use the public method and check the message message retrograde with the use of sexual intercourse. Sexual intercourse means that the function of intercourse with a certain sum is only used for the same information, so the message is no longer used. Before using the and function sexual intercourse, it is necessary to save the available intercourse and its usage status. Fang Tong shares sexual intercourse but shared sexual intercourse sharing different sharing must share Fang Tong secretly save shared sexual intercourse sexual intercourse volume needs to be used together to save its useable form as long as the preservation of sexual intercourse is available. Therefore, the way to save sexual intercourse can be one by one, or only the available intercourse can be saved, or can be the ordinal end of a certain garden. It is not possible to save it. It is all possible intercourse. For example, if the amount of sexual intercourse is a natural number greater than 100, the amount of sexual intercourse in the garden is all available, so just save 101. The amount of payment itself can not be secret, that is, the amount of payment can be obtained by a third party. The party can have a different amount of sexual intercourse used in a certain medium, one party only uses to generate messages, the other party uses only unused

The amount of traffic in the other park is just the opposite. The same sexual intercourse can also be used together as long as the sexual intercourse is used.

Use the message required to use the sexual intercourse together with the function message AC. The message used in the sexual intercourse is used as the message. The received traffic must be used. The received message includes the sexual intercourse and the message AC. Whether the message AC is the same also must be sexual intercourse and its use The transaction volume is the available transaction volume that has not been used before by the message and must be used when the transaction volume is used. Sexual intercourse You can use it or you can not use it according to your needs. The message freshness rule of BA or VO is that the axiomatic volume is fresh, so the message from the amount of sexual intercourse is also fresh, so as long as the AC and the amount of sexual intercourse and its usage are the same, the integrity and freshness of the message and the unique information of the message can be Exchange the same message as long as you use a different amount of sexual intercourse can get different messages AC can be fresh and unique. Different messages use the same transaction volume. As long as the transaction message is valid, the integrity, freshness, and uniqueness of the message can be used.

If you can use sexual intercourse synchronously and both can be regarded as the most recently used sexual intercourse, then you can be the identity.

Yu identity usually requires multiple information exchanges to ensure the simultaneous use of a sex. Synchronization is required for identity because there may be an interruption in Xia and other reasons, so that the output or the message is not available, but it may intercept the misappropriation. In an information event, multiple information exchanges, information exchange message directions, and mode messages all use a different amount of sexual intercourse. The amount of intercourse can be used synchronously. Because the amount of sexual intercourse is relative to the use of the function, you can also use the same The amount of intercourse information exchange uses different gods. The amount of intercourse is different from that of different ones. Functions are different, no matter how much function can be divided into functions and input and output functions, it can be regarded as a black box of processing. It is indefinite. In the case of not being taught, as long as and the amount of sexual intercourse is the only combination, regardless of whether the message is the same, the message is not the same. The integrity and freshness of the message and the uniqueness of the message. Multi-information exchange, inter-synchronization, and communication identity. Because the message does not have the function of confidentiality of information, the attacker can use the content of the message or even block the message, but it is impossible to modify the message, replace the message, fake the message or the message. If the confidentiality of the communication process is required, this other addition method is necessary.

Assume that the shared AC message input message function V sexual intercourse volume VT with that message can be expressed as follows Common message method

AAC uses the value of the message method

Message method used by AC V

AC uses the method of sexual intercourse

AC V if this function is an algorithm function h uses the message method of sexual intercourse

AC K W

The above methods show that the use of sexual intercourse is very similar to and, but the methods are very different in their processes.

Use the same amount of sexual intercourse

The same must have the same amount of phase. The system must have phase synchronization. If you need a specific one, you usually need a trusted third. To receive the received message, you must use the same comparison in the difference garden, but the comparison is not unique and the requirements are stronger. The sexual intercourse volume does not use the system, but the requirement is to update the phase before use to save the intercourse volume and its use. The message must be compared with the intercourse volume. The use of intercourse volume must be no longer compatible with the intercourse volume. Identity sexual intercourse must also be used in reverse synchronization. Multiple interchanges or multiple shared interchanges can be used.

Use sexual intercourse

It is the use of the raw and the message from which the message can only be generated by the new one, so if the messages are mutual, they must be separate. Fang Xian

It is more conducive to the donor, especially the Chinese fans, to get the returned levy as long as the message, and because there is no use to save Possibility of malicious use. The party that holds the amount of sexual intercourse is a predictable amount of intercourse. The party must use the amount of sexual intercourse and the message and any third party who does not know the message that cannot be generated.

The amount of sexual intercourse that has been used is unlikely to be effective, so aspects can effectively prevent and news.

Use of sexual communication

In the past, in many communications, message group communication was used, and each agent used a message message, and the message was divided together. In the communication, the received message group must also be saved as a message. But the amount of message copper sexual intercourse is very different. In communication, each communication can have a set of sequences. It can only be used in communication. Even if it is born in communication, it can only be used in an orderly manner. No, but it is still possible to use it again. If the message and function are not communicated, it may be the same. The message cannot be fresh. That is, the message is not fresh but the message grouping sequence in the communication. The role of freshness in message packet communication must use different sequences, some communications use different, some use the same

The same common and different sequences may cross the same, so the message is only the same as mercury. It can only be used in communication. It is for communication. The amount of sexual intercourse is for use and the function is usually fixed as well as can be seen as the function

And the sexual intercourse volume can be used or not used, even if it is used, it may require some traffic volume, such as the current traffic volume.

You can put the amount of traffic to ensure the safety. In the message, not only the message must have the amount of sexual intercourse and its usage status. You can use different one. The same message. You can use different sexual intercourse sequences or you can use the same sexual intercourse sequence to use the same The traffic sequence may not specify which sex is used first, as long as it is not used.

Safety analysis using the method of sexual intercourse.

1. Algorithm

Generating message AAC's algorithm function is usually a column function message. This must be sufficient and AC is directed. It can generate the same AC. It is impossible to AAC and the message line inverse. This can be obtained even if you consider the various types of functions. Represents the message Represents F represents the nematic function of the message AC algorithm function F has the following

Message Easy AC F

2 Harding message, message AC and algorithm F are impossible

Because AC is more than one-of-a-kind, the function is directional, and it does not exist. 3 It is known that Fk and F F are not feasible on. That function F is collision free.

4 The functions F and of find different messages so that F F is not feasible on, then function F is collision free. 5 The function has a sufficient sum, so that every small change in or message will form a huge change in AC to be completely different.

Even if it is safe, it is better to use safe or safe function algorithms such as D5 algorithm and so on.

2. Boxing

Due to the limited degree, as long as there are enough signs to collect the fist, it can be used.

Known F, News and AC Assumed AC

The AC obtained by the k-function F algorithm has that the distribution of and AAC is uniform

A F

All 2 can get big k " Makes the above equation true. It is possible to get the same as the method 2 AC2 can get 2 "same to <<you can get the only

The best way to resist is to increase

Degrees show an exponential level, making it impossible to use the next method.

If 10 presupposes per second may use large size or use distribution method, then 128 large 2 0 3 1028

It is impossible to live in. But considering that the law is 5 times larger, the ability may be 10 times, so the more conservative method is not used. For example, if 128 is safe in the past, then 1024 or even more is possible. It will be updated regularly. The ability to use limited ones can be prevented to a certain extent.

, Analysis

Because AC algorithm function may exist, some people may not need to know, only analyze the past news, history teaching, new news and news. The enhanced resistance analysis can be used together with the message placed at the beginning and end of the message or the generated message can also be used as the message or transaction volume. Because the amount of sexual intercourse has a fresh resistance analysis method also has a very big effect. Only the amount of sexual intercourse used can be new news.

The function of the sheep column is the function of F and F2. The message of the force is V. The V is the amount of sexual intercourse. The position of each element represents the order of the arrangement. The algorithm of the message can be as follows

F V K2 F2 V or

FV) K2 F2 V) The message method is as follows

AC V or

AAC V or

AC V 2 or

AC V or

AC (V or

AC 2 H V

The above message methods all help to enhance security.

4. News

Since the messages are generated together with the intercourse messages and the intercourse messages are the same and the function only uses the same valid messages, it is not possible to succeed.

The beneficial effect of this is that the use of sexual intercourse can be, convenient, effectively the integrity and freshness of the message and the uniqueness of the message, and can effectively prevent the simultaneous use of secure sexual intercourse in many ways can effectively identify and enhance the identity and Security makes many original ones.

Hugh way

Transaction Security Solution

We are a credible party in the plan. And always go to and work hard for customers. The customer's identity and information in the customer account provide the same identity and performance for each customer.

First and again mode. Use 1024 by

In the case of generating a condition, it is shared and kept secret by the customer's identity. Its another sexual intercourse model. The common mode of sexual intercourse uses an integer greater than that only needs to save the available volume, that is, the smallest available integer 1 for mercury preservation. Integer Interchangeable Quantity Take the smallest available integer integer 1 as the usable integer. The sexual intercourse quantity of this scheme is usually integer order using the smallest available using the same one-sum function and it is no longer used when it is valid but more than one can share the same intercourse sexual intercourse quantity.

That is to say, if the core volume is not correct, then the volume can be used, but the volume cannot be 5 integer. In addition, other security measures can be added. For example, only 10 messages can be used to solve other transactions before other transactions can be used.

Line one operation.

Generate message function and this pattern. First use the amount of sexual intercourse will

Different ways to get and 2 can be to use different delivery volume, Vb and sexual intercourse volume V Use the D5 function to confuse 8 Hejing to get a new 1024. Divide each 8 word by more than 10 to get 16 Arabic word bow. The characters of the message message are Arabic numerals. Similar to the news, the 16 Arabic numerals obtained the effect of the bow. If you need more,

You can get the transaction information that is more convenient for information exchange. 8 Arabic numerals can be used for transaction security. The Hugh algorithm is expressed as follows

024, the strength of 1024 and K2 to 8 of the same, Vb force close exchange volume 128 V sexual intercourse volume represents D5 function F represents special A digital function power trading message R power trading result message ACq ACa.

(KV Va

2 (KV) 18 KV1 17 + 2+ 1 + 14+ 5+ 16+ 17+ 18 "+" means that the series connection is the same

K2 KV Vb

22 KV K2 28 V 7

1 2+ + 4+ 5+ 26 7+ 28 + "means series well AC V ACq F AC

AC2 KV R 2

ACa F AC2

Line and customer

Hugh is a transaction. Conquest is a transaction system. Its function mainly has aspects

1. Information storage and sharing. It saves the customer's information including the customer, the customer, the sharing and the sexual intercourse volume provision and the sexual volume volume customer shared information preservation. 2. Trading. Accept customer transactions Submit each transaction system and the transaction results returned by each transaction system to form a message message generation return to the customer.

3. Save transaction information. Transaction conquest saves each transaction information to provide customers. Very transactional conquest, internal security can be connected to each terminal provided, can also be connected to WEB to provide various uplink services, each can be connected to provide various services can be connected Pick up each to provide each transaction. Conquest can be connected to each supernatural power supply and all can use the same transaction.

Customer Hugh is the customer. Due to the fact that many customers need and need to exchange messages, it is impossible for customers to do it manually and borrowing the terminal is not convenient for safe use. However, because the algorithm does not require much information to be saved, it can be fully integrated. The customer must store the customer's information, including the customer's information, the transaction amount and the status of the completion of the transaction message, and the external communication can be connected to the information exchange, non-contact information exchange, the LCD and the keypad, and manual information exchange can facilitate the use of various information terminals. However, if you use to complete the customer rest function is also possible.

Transaction

The transaction can be traded and the sum is a transaction information exchange. The transaction can be completed by multi-transaction information exchange. The following is a transaction information exchange mode of transaction summation

1. Customer transactions. The transaction information usually includes the amount of the client transaction, transaction, etc.

K A OU T means the minimum available transaction volume on V

C DE + KEY + A 』T

AC V 1)

Before the completion of the transaction message, the use of sexual intercourse conquers customers, V M and A.

2. Banks conquer all transaction news. Conquer each transaction before receiving the transaction message. If the transaction volume is available, if it is not available, return the customer's latest available transaction volume to the synchronous transaction volume is normally available.

If the customer's comparison is not the same, the amount of sexual intercourse Customer in error. If the previous sexual intercourse is used to send the transaction message to the transaction system.

3. The trading system receives and returns her trading information. 4. Conquer all transaction results. The transaction R S succeeds, the vigour 1 fails, 0 is still used, but the transaction amount used before the transaction must be used but different.

2 C DE + Y + A T + R S T

AC2 V 2 2

Conquer each and return the transaction R S T and the result message AC2 to the customer. Other information is not necessary. 5. Customer transaction results.

The client receives the transaction result message and generally obtains the transaction message comparison message. The transaction amount of the previous transaction of the monk and its also can be traded, otherwise the message can be confirmed or

The results need to be retrieved again. Complete the sexual intercourse phase. The above is the special feature of the general trading client A and client B. Customer A special 100 to customer B. Guarantee the freshness and synchronization of the amount of sexual intercourse, and use the special force to exchange the transaction information. 4 new K 、、、

1. Jinte client A submits Jinte message Sexual intercourse usage statement 1 Conquer the transaction news. Transaction offer message

as follows

AC V

2. Conquer the same message Special Message of Client A Before Client A Sexual Intercourse Usage Status 1 Special transaction.

3. The special transaction will be returned to the conquest. There is no special customer B for this gold Subjects.

, Very conquered each received Jinte out Jinte out news

Former Sexual Intercourse Usage Statement 2 Return Jin Te out the message to customer A. The message is as follows

AAC2 V 2 2

3. Customer A uses the same to submit Gint's. If it succeeds, the transaction seems to be before the transaction message. The transaction message is as follows

AC3 V 3)

, There are many ways to trade. Prevent special manpower. If customer A is in the transaction and submits customer B's account name, such as A Shang transaction, transaction or manual service center, etc., then the customer can directly trade the special message with the customer's name center for each transaction. The name or transaction is self-robbing in a non-connected way, using self-robbing or semi-robbing message

If the situation is different, human mercury can be sent directly

Otherwise, customer A will hand over the transaction to customer B.

The transaction can be different.

2. The bank receives the transaction news message and uses the pre-A sexual intercourse volume 3 to exchange the transaction message with her. The bank transaction receives the transaction message. The transaction has been proposed. If necessary, the account of the special customer B will increase the security of the special customer R. The security of the special customer B can be used with the special money of the customer B, such as 24 hours. After the transaction is completed, the transaction is returned to conquest. Conquer the transaction message generated by the customer and receive the transaction message of customer B respectively. The message in customer B can be used by the latest available sexual volume of customer B and the transaction volume update of the previous transaction of customer A and customer B respectively. Save the transaction and then save customer A And customers Messages and related messages return transactions. The transaction message is as follows

Customer A transaction message AC4 V 4 4 Customer transaction message

C DE2 indicates that special transaction Y is a transaction pipeline, which can increase the transaction amount of A O T force and RES ET indicates.

R DE2 + Y + A q + S T

AC2 V1 2

Customer B directly submits the clearance

DE2 + K Y + A qT

AC V

10. When the transaction receives the transaction, it can send the transaction message and related message of the transaction or both can serve the devices to retrieve the transaction and related message. The transaction conquers the same method, and the most transaction of the transactional volume can be traded.

Has a beneficial effect

The transaction uses the digital method of sexual intercourse to ensure the integrity and freshness of the transaction information, and even the identity of multiple parties. Make the transaction phased under the premise of ensuring the security of the transaction. Only the way or terminal used by Hugh Husband

It can be used with a high degree of safety and convenience.

With this solution, you can use the same service as the web server you used to conquer the same WEB devices.

It is impossible for the outsider to invade the conquest only if the transaction message is only from the outsider and the transaction message must be obtained in order to any third party who is not a holiday It is impossible to counterfeit or trade messages. The security of gold can guarantee the security and effect of each security instead of the security of gold. The connection of B ee needs to use fire prevention to prevent the communication of each customer. Security socket can be used to increase confidentiality and enhance safety. The Golden Security WEB, the external fire protection, and the Golden Security used by the customers are only conquered by the devices and customers. Therefore, customers can also use A-Shang on any A-Shang as long as the customer's safety is safe even if it cannot be trusted.

Because the characters used in the message of this solution are Arabic numerals, it is easy for customers to conduct various transactions through channels such as A, A, and even artificial service centers, which can facilitate the use of all transactions anywhere. And the magical power systems and channels used by customers' funds security. Since the transactions using the same transaction methods are basically the same, the transaction methods in each channel have similar use and they can be used in the system and can be used in large numbers.

Claims

Claim

1. The digital method is characterized by

Use and Message Message Use Sexual Intercourse Before using sexual intercourse, you need to determine the amount of available intercourse and its usage status. The message must use the sexual intercourse quantity.

The amount of sexual intercourse must be used and saved

Yu's and functional sex are only used for the same message.

2. The digital method of Requirement 1 is characterized by the common use of the volume of sexuality, which has multiple uses, and is different for each medium.

The amount of sexual intercourse has different uses. The amount of sexual intercourse is different from the use of different messages.