A secure and robust authentication scheme between human and computer

Electronic authentication with,a token such as a smart card ha been used more and more widely. It is necessary to ensure the security of the token and sensitive information such as password when it is communicating with client server. In traditional authentication methods, the token often is regarded as the human user himself. So the mutual authentication between Human user and server computer of service provider is an important issue, which can protect the user from cheating by unreliable client server. Based on mobile station which has been widely used and of stronger computing ability, this paper proposes a new protocol that is built upon a novel two channel model, where mobile station is used to enhance the authentication between human and computer. Our system possesses a number of appealing features. By mobile station, it provides another interface to human, so the authentication is enhanced not only between the human and the client server, but also between the human and the token. Public key cryptosystem is avoided, so our protocols are quite efficient in terms of both communication and computation.