§10.2 discusses identification schemes involving fixed passwords including Personal Identification Numbers (PINs), and providing so-called weak authentication one-time password schemes are also considered. The remainder of §10.1 provides introductory material. 10 Identification and Entity Authentication Techniques which provide both entity authentication and key establishment are deferred to Chapter 12 in some cases, key establishment is essentially message authentication where the message is the key.Ĭh. Conversely, entity authentication typically involves no meaningful message other than the claim of being a particular entity, whereas message authentication does. Related topics addressed elsewhere include message authentication (data origin authentication) by symmetric techniques (Chapter 9) and digital signatures (Chapter 11), and authenticated key establishment (Chapter 12).Ī major difference between entity authentication and message authentication (as provided by digital signatures or MACs) is that message authentication itself provides no timeliness guarantees with respect to when a message was created, whereas entity authentication involves corroboration of a claimant’s identity through actual communications with an associated verifier during execution of the protocol itself (i.e., in real-time, while the verifying entity awaits). Names for such techniques include identification, entity authentication, and (less frequently) identity verification.
The most common technique is by the verifier checking the correctness of a message (possibly in response to an earlier message) which demonstrates that the claimant is in possession of a secret associated by design with the genuine party. This chapter considers techniques designed to allow one party (the verifier) to gain assurances that the identity of another (the claimant) is as declared, thereby preventing impersonation. 388Ĭhallenge-response identification (strong authentication)Ĭustomized and zero-knowledge identification protocolsĪttacks on identification protocols.
0 kommentar(er)
