摘要：In order to solve network security problem, we need identity authentication protocol to ensure legal user’s authority. Multi-factor identity authentication protocols have more merits than the common identity authentication protocol. This paper analyzes the shortcomings of existing network identity authentication methods, and proposes a new authentication protocol based on SM2 and fingerprint USBkey. The proposed scheme,which Combines the fingerprint USBkey of fingerprint certificate with the National cipher algorithm SM2, constructs the multi-factor authentication model. And the scheme obtains many merits:1) it adopts the challenge response authentication mechanism, and realizes the multi-factor mutual authentication.2) it implements USBkey to verify the user and the remote server authentication by fingerprint features. 3) it can prevent eavesdropping attack, impersonation attack, replay attack and dos attack effectively. 4) it has better calculation and security performance than the existed schemes.
