Mixed Symmetric Key and Elliptic Curve Encryption Scheme Used for Password Authentication and Update Under Unstable Network Environment

Data encryption scheme has been used widely in network communication. It mainly contains two encryption schemes: symmetric key encryption and asymmetric key encryption. Symmetric key encryption has the fast encryption character, while it cannot transmit key in unsafe channel due to the same encryption key and decryption key. On the contrary, asymmetric key encryption has the different encryption key and decryption key. But its encryption speed is too slow. Especially, the above schemes cannot effectively conduct secure password authentication and password update under unstable network environment when user logins remote management. To solve this question, we propose a mixed symmetric key and elliptic curve encryption scheme for password authentication and update. Our new scheme is composed of four stages: registration, password authentication, password update and session key distribution. In addition, it provides defence to answer various attack such as password guessing attack, server spoofing attack, data eavesdropping and replay attack. What’s more, the new method generates a common symmetric key encryption, which needs less convergence time than traditional asymmetric key encryption. Finally, we give the performance and efficiency analysis for this new scheme. Also there are comparison experiments with the latest encryption schemes to demonstrate the effectiveness of our new method.