论文标题
基于混乱和零知识证明的身份验证协议
An authentication protocol based on chaos and zero knowledge proof
论文作者
论文摘要
端口敲门是一种通过封闭的防火墙对客户进行身份验证的方法，并授权其要求的措施，使Severs能够为经过身份验证的客户提供服务，而无需在防火墙上打开端口。端口敲门的进步导致设计的复杂性提高，从而阻止了端口敲击解决方案的潜力。本文提出了一种新颖的端口敲门解决方案，称为Crucible，这是一种安全的身份验证方法，具有较高的可用性和隐形功能，可以使服务器和服务保持隐藏和保护。坩埚是一种无状态解决方案，仅需要客户端记住命令，服务器的IP和选择的密码。该解决方案被转发为保护服务器免受从端口扫描到零日开发的攻击的方法。为了充当客户端和服务器的随机甲骨文，通过混乱系统生成加密哈希。
Port Knocking is a method for authenticating clients through a closed stance firewall, and authorising their requested actions, enabling severs to offer services to authenticated clients, without opening ports on the firewall. Advances in port knocking have resulted in an increase in complexity in design, preventing port knocking solutions from realising their potential. This paper proposes a novel port knocking solution, named Crucible, which is a secure method of authentication, with high usability and features of stealth, allowing servers and services to remain hidden and protected. Crucible is a stateless solution, only requiring the client memorise a command, the server's IP and a chosen password. The solution is forwarded as a method for protecting servers against attacks ranging from port scans, to zero-day exploitation. To act as a random oracle for both client and server, cryptographic hashes were generated through chaotic systems.
