ECC-based certificate-less multi-factor authentication scheme

Abstract

Currently, personal information leakage and identity theft have become risks that cannot be ignored. As a robust authentication mechanism, multi-factor authentication (MFA) has gained prominence. However, many existing MFA schemes based on certificate-less public key cryptography amalgamate multiple authentication factors into a single factor for local verification, which fails to achieve independent authentication of each factor and is difficult to resist internal privilege attacks. To address these issues, this paper proposes a certificate-less multi-factor privacy authentication scheme based on elliptic curve cryptography. The proposed scheme divides the full private key into multiple authentication factors and employs the Schnorr zero-knowledge proof technique to independently generate challenge values for each factor, facilitating separate authentication of multiple factors. Notably, this approach eliminates the need to reconstruct the full private key during the authentication process, thereby effectively mitigating the risk of private key leakage.