Research Of Authentication Mechanism Based On Zero-knowledge Proof And Discrete Logarithm

In the secure network communications, everyone involving it must authenticate his own identity or validate other's identity with certain form of authentication mechanism, so that they can realize accessing control and record. With the rapid development of computer networks, the user authentication becomes very important.The thesis overviews the principle and technology of user authentication. After having deeply discussed some typical authentication schemes, loopholes and limitations are pointed out. A modified ELGamal signature scheme is proposed in the thesis, which particularly avoids complex calculation of inverse operations. It has lower calculation complexity . Combining zero-knowledge proof with the modified ELGamal signature, a new authentication mechanism is presented. In the new authentication mechanism ,a user does not need to expose his secret information when authenticated. Security is improved. It realizes not only user authentication but also authentication of user's public key. Based on the difficulty of the discrete logarithm problem, the corresponding algorithms of one-way authentication and bidirectional authentication are designed.The thesis designed a verification system of simulation by using VC++ . Experimental data shows the authentication algorithm is correct and effective.