Secure and convenient authentication in global networks

全球网络中安全便捷的身份验证

• 批准号: 07455156
• 负责人: IMAI Hideki
• 金额: $ 3.58万
• 依托单位: The institute of industrial science (IIS), University of Tokyo
• 依托单位国家: 日本
• 项目类别: Grant-in-Aid for Scientific Research (B)
• 财政年份: 1995
• 资助国家: 日本
• 起止时间: 1995 至 1996
• 项目状态: 已结题
• 来源: https://kaken.nii.ac.jp/grant/KAKENHI-PROJECT-07455156/
• 关键词: challenge-response; human identification; KPS; access control; firewall; router; cryptography; visual secret sharing; 質問応答型個人認証方式; 視覚的秘密分散法; 著作権; KPS; プライバシー; 電子決済; 超流通; 個人認証; 秘密分散; 印刷記録; 関係の認証

1. Evaluation of challenge-response based direct human identification schemesCompared with other direct human identification schemes, challenge response based ones have two advantages. Frist they are more robust than ones using passwords only. Second they do not require high-cost special devices such as fingerprint verifier to identify a user. However, our investigation shows that in order to make chalenge-response based schemes secure against such attacks as peeping which may be encountered in practice, the size of a set of secret data which have to be remenbered by a prover must be large, which renders these shcemes unusable in practice due to a limited memory capacity of human being.2. Applications of visual secret sharing schemes to human identificationAs a solution of the problem mentioned in 1., we proposed to apply visual secret sharing (VSS) schemes to the challenge-response based direct human identification schemes. Our proposal can make the human identification schemes extremely secure against peeping attackes, mainly due to the fact that in our proposal, challenge pattaerns cannot be seen by attackers, and bence the attackers cannot guess the prover's secret information at all. In addition, since VSS can be realized by ordinary transparencies and a simple display, low implementation cost is another outstanding advantage of out proposal.3. Object authentication and access controlWe also proposed a number of systems to achieve secure access control and object authentication by using cryptography (in particular key predistribution system or KPS). Being differenct from systems using firewalls or routers, security of our proposed systems do not rely on the underlying operating system (OS). Thus these systems are more suitable for global networks which are managed by an array of different operating systems.

1。基于挑战反应的直接人类识别率与其他直接人类识别方案的评估，基于挑战响应方案具有两个优势。弗里斯特，它们比仅使用密码更强大。其次，它们不需要高成本的特殊设备，例如指纹验证器来识别用户。但是，我们的调查表明，为了使基于Chalenge响应的方案可保护诸如在实践中可能会遇到的偷窥攻击之类的攻击，一组秘密数据的大小必须由供奉献者重新包含，这在实践中使这些Shcems在实践中无法使用，这是因为人类的记忆力有限。2。视觉秘密共享方案在人类身份证明的应用1中提到的问题。我们的建议可以使人类身份证明方案非常安全地防止偷窥攻击，这主要是因为在我们的提案中，攻击者看不到挑战pattaerns，而攻击者攻击者根本无法猜测摊子的秘密信息。此外，由于VSS可以通过普通透明胶片和简单的显示来实现，因此，低实施成本是OUT提案的另一个出色优势。3。对象身份验证和访问控制我们还提出了许多系统，以使用密码学（特别是关键的分布系统或KPS）实现安全访问控制和对象身份验证。使用防火墙或路由器的系统不同，我们提出的系统的安全性不依赖于基础操作系统（OS）。因此，这些系统更适合由一系列不同操作系统管理的全球网络。

项目成果

古原和邦,今井秀樹: "TRMにおける認証バイパスに関する考察" 電子情報通信学会信学技報. ISEC96-24. 9-15 (1996)

Kazukuni Furuhara、Hideki Imai：“TRM 中身份验证绕过的研究”IEICE 技术报告 9-15 (1996)。

加藤 拓: "視覚復号型秘密分散法の拡張と応用に関する考察" 電子情報通信学会技術研究報告. ISEC95-19. 41-48 (1995)

Taku Kato：“视觉解码秘密共享方法的扩展和应用的考虑”IEICE 技术报告 41-48 (1995)。

M.Ishikane,H.Imai: "Compressing of Access Control List" Proceedings of ISITA 1996. 159-162 (1996)

M.Ishikane,H.Imai：“访问控制列表的压缩”ISITA 会议记录 1996. 159-162 (1996)

末松俊成・今井秀樹: "超流通ラベル配布型超流通システム" 第19回情報理論とその応用シンポジウム予稿集. 301-304 (1996)

Toshinari Suematsu 和 Hideki Imai：“超级分发标签分发系统”第 19 届信息理论及其应用研讨会论文集 301-304（1996）。

Taku Katoh,H.Imai: "Reducing the Share Size of Visual Secret Sharing Schemes" Proceedings of ISITA 1996. 67-70 (1996)

Taku Katoh,H.Imai：“减少视觉秘密共享方案的共享大小”ISITA 会议记录 1996. 67-70 (1996)