Cryptanalysis And Improvement For Two Universal Authentication Methods

In recent years,with the rapid development and in-depth advancing of global informationization,compared with the physical world,the proportion of network world in our society is getting larger and larger,so the network security has became a problem that cannot be ignored.Cryptography is not only the basis of information security,but also the core technology to protect network security.Meanwhile,cryptography enable guarantee the security of confidential information,and also guarantees the identity of the publisher.Authentication protocol designed to provide credibility for the identity of two-party or multi-party,which is a necessary process of key agreement among each participants.Key agreement allows entities generates a common session key in an insecure channel,aiming to help participants achieve security requirements and provide various security services.Graphical captcha technology and radio frequency identification(RFID)technology as two security primitive have applied to all levels of our society.Captcha technology is intended to provide mutual authentication for legal users' availability and distinguish computer and human apart using the Turing test,which still has many hot spots to explore.The importance of Captcha technology is that it can accomplish high efficiency and high security simply rather than trade off among complicated design,redundant algorithm and user experience.Radio frequency identification is an automatic identification technology that depends on radio frequency signal for contactless communication.Radio frequency identification technology has increasingly applied to the area of transportation,logistics,medical treatment,military and so on,due to its reusability and the convenience of identification.Therefore,design an safe,efficient and low cost radio frequency identification security protocol is one of the significant research topics of this field.Therefore,based on the above studies and Chebyshev chaotic maps algorithm,this paper propose two universal authentication protocols,the main research results as follows:1.According to some Graphical Captcha authentication protocols' loopholes,firstly propose a new strong security authenticated scheme based on Graphical Captcha without password tables with privacy protection,aiming at both providing convenience for the user login and staying clear of password guessing attack.Considering the Chaotic system has numerous advantages,such as extremely sensitive to initial parameters,unpredictability,boundedness,etc.So our scheme is based on hard artificial intelligence(AI)problems and chaotic maps to achieve mutualauthentication.2.According to the defects in previous proposed RFID authentication protocols,such as,impersonation attack and de-synchronization attack,propose an improved RFID authentication protocol.The protocol depends on hash function to protect tag identity and support the server verifies each tags.Consequently,the improved protocol inherits the advantages of previous proposed protocols,at the same time eliminates the exiting research vulnerabilities,improved the availabity of radio frequency technology.