Метод багатофакторної автентифікації на основі модифікованих крипто-кодових систем Нідеррайтера – Мак-Еліса

Abstract

Упровадження OTP-технологій (Technology of One-Time Passwords) дозволить зменшити ризики, з якими стикаються IT-фахівці ІОС при використанні довгострокових паролів. Аналізуються способи формування ОТР паролів, основні загрози використання. Розглянуто матматичні моделі побудови протоколу багатофакторної аутентифікації на основі гібридних крипто-кодових конструкцій на збиткових кодах (ГКККЗК), запропоновані практичні алгоритми їх реалізації.The proposed mathematical models and practical encryption / decryption algorithms for cryptogram / codograms in hybrid crypto-code designs based on modified coder-coded Niderraiter and Mac-Alice systems on loss codes differ from the known shortening of error vector characters (vector of initialization), and provide the necessary cryopresistance when transmitting data through open channels of mobile communication. A multi-factor authentication scheme based on hybrid crypto-code designs on the loss-making Niderraiter-Mac-Alice codes allows eliminating a significant 2FA defect based on Sms-Messages - ensuring privacy when transmitting Otp-Password via mobile communication channels. The conducted researches in the work confirm that the application of the proposed procedures ensures the speed of cryptographic transformations comparable with known approaches, the proof of cryopreservation on the basis of a complex theoretical problem - the decoding of a random code (about a thousand group operations are provided) and the probability of using a shortened algebraic geometric code. An improved method of strict two-factor authentication with Otr-Passwords is proposed on the basis of crypto-code designs of modified asymmetric Mc-Alice and Niderraiter crypto-code systems, which allows eliminating the main shortcoming of the 2FA protocol - the transmission of individual token tokens by open channels of mobile communication. To this end, crypto-code systems are proposed at the loss-making codes that provide the necessary security measures based on encryption of the asymmetric Niderraiter / Mac-Alice crypto-coding system, the speed of crypto transformations at the level of block crypto algorithms, and the provision of data transmission with direct error correction. This approach can be implemented in modern mobile and desktop applications using Internet protocols and / or mobile networks. In order to further reduce the power of the alphabet - the Galois fields - in further research, it is proposed to use systems on the loss codes that allow simultaneously to form multichannel cryptosystems.