An Double-Way Authentication Access Control Scheme Based on Harn's Digital Signature

Abstract

For information protection system, based on Harn's digital signature scheme and zero knowledge proof, this paper presents a double way authentication access control scheme. The scheme is safer than previously proposed schemes. In the scheme, double way authentication may be done between a user and the system without exposing their secret information, and their sharing secret is used for authenticating the requesting user not to illegitimatimately access the protected information body. The scheme can perform the access operation in dynamic environments, such as change access privileges and insert /delete users or information bodies without implicating any user's secret key, and need not restructure the information protection system. Thus, the scheme's dynamic feature is perfect. The proposed double way authentication access control scheme's computation security, based upon Harn's digital signature scheme and Zero knowledge proof, does not lower than the computation complexity of solving “Discrete Logarithm Problem”.