关键词: SM2, SM3, 信息安全, 身份认证, 数字签名

Abstract: Aiming at the problem of user identity security authentication faced by existing information system, we proposed a dual private key security factor authentication scheme based on USB Key. The scheme is based on the domestic cryptographic algorithm SM2 and SM3. Firstly, the paper adopted “user password+digital signature” double authentication method, and user password participates in the entire signature process. Secondly, the paper introduced the concept of security factor to improve the authentication efficiency under attack. Finally, the paper improved original signature process and realized the mutual authentication between the client and the server. Through experiments, we verified the correctness and security of the scheme, and also showed that the scheme can satisfy the security requirements of identity authentication of information systems and has certain practical application value.

Key words: SM2, SM3, information security, identity authentication, digital signature