Cross-realm client-to-client password-authenticated key agreement protocol
Tao Wang · Jisuanji gongcheng yu sheji · 2012
A cross-realm client-to-client password-authentication key agreement protocol using common storage devices or mobile devices is presented to meet the requirements of the secure,efficient and practical communications between clients,who are registered in different servers and own different passwords.The expensive smart cards and synchronized clock system are replaced by the common storage devices and random numbers.The improved scheme is secure against the known attacks in secret key environment and meets the requirements of the security.In addition,it keeps the merits of the smart cards,need not keep the password-tables or verifier-tables in the server and does not restrict by smart cards in real life implementation.The improved scheme is more secure,efficient and practical due to the introduction of the common storage devices and random numbers.