ISO/IEC 9798-4-1999 信息技术 安全技术 实体鉴别 第4部分:用密码校验函数的机制

标准号：ISO/IEC 9798-4-1999
中文标准名称：信息技术 安全技术 实体鉴别 第4部分:用密码校验函数的机制
英文标准名称：Information technology - Security techniques - Entity authentication - Part 4: Mechanisms using a cryptographic check function
标准类型：L70
发布日期：1999/12/31 12:00:00
实施日期：1999/12/31 12:00:00
中国标准分类号：L70
国际标准分类号：35.040
适用范围：This part of ISO/IEC 9798 specifies entity authentication mechanisms using a cryptographic check function. Two mechanisms are concerned with the authentication of a single entity (unilateral authentication), while the remaining are mechanisms for mutual authentication of two entities. The mechanisms specified in this part of ISO/IEC 9798 use time variant parameters such as time stamps, sequence numbers, or random numbers, to prevent valid authentication information from being accepted at a later time or more than once. If a time stamp or sequence number is used, one pass is needed for unilateral authentication, while two passes are needed to achieve mutual authentication. If a challenge and response method employing random numbers is used, two passes are needed for unilateral authentication, while three passes are required to achieve mutual authentication. Examples of cryptographic check functions are given in ISO/IEC 9797.