摘要：文章讨论了Web服务用户身份验证和数据库数据加密传输的方法,提出了采用非对称加密算法来传送对称加密密钥,采用SOAP头来传递验证信息和经过加密的对称密钥的认证协议,并用C#实现了这一网上银行的Web服务身份验证及SQL2000数据库数据加密传输协议,实际测试表明这种基于Web服务的用户身份验证是安全有效的,可用于网上银行。

摘要：针对智能家居物联网设备的安全问题,提出一种轻量级、隐私保护的远程用户认证协议。该协议将随机数和对称密钥相结合,采用受限制的应用协议(costrained application protocal,CoAP)进行消息传输,免除用户记忆密码和携带智能卡的麻烦,完成远程用户、智能网关和物联网设备的身份认证。完成远程用户和智能家居设备的会话密钥协商。通过BAN逻辑形式化安全分析和非形式化安全分析,验证了提出协议的安全性。通过性能分析,验证了提出协议的可行性和轻量级特性,通信开销相较之前的研究减少了60%。

摘要：网络的普及使得网络安全问题日益重要 ,协议的安全性和密码算法的安全性是网络数据安全的两个最基本的概念。介绍了几种具有代表性的安全协议的形式化验证工具 ,并提供了用 JAVA语言实现的基于攻击者和秘密的安全协议验证算法。提出了身份验证协议必须交换秘密的概念 ,还为协议的形式化验证过程设计了框架。

摘要：Numerous smart card based authentication protocols have been proposed to provide strong system security and robust individual privacy for communication between parties these days. Nevertheless, most of them do not provide formal analysis proof, and the security robustness is doubtful. Chang and Cheng(2011) proposed an efficient remote authentication protocol with smart cards and claimed that their proposed protocol could support secure communication in a multi-server environment. Unfortunately, there are opportunities for security enhancement in current schemes. In this paper, we identify the major weakness, i.e., session key disclosure, of a recently published protocol. We consequently propose a novel authentication scheme for a multi-server environment and give formal analysis proofs for security guarantees.