关键词: 远程认证, CPK算法, 随机数, ECDH协议, 私钥泄露

Abstract: With broadband network access and the rise of enterprise mobile office models, there are problems such as the leakage of the client's private key and the middle-man attack of the ECDH protocol, an improved CPK authentication scheme is proposed to solve the problem of client private key leakage effectively and realize the simultaneous login of multiple users.The proposed improvement scheme is CPK algorithm based on random numbers,this algorithm improves the key protocol based on the original CPK, and binds the user id with a random number.Different private keys have different random numbers and there is no linear relationship.Through the comparison of performance, it is proved that the scheme has strong security and computational efficiency.

Key words: remote authentication, CPK algorithm, random number, ECDH protocol, private key leak