在網路發展快速的時代，網路服務隨之興起。在以單一伺服器為基礎的傳統通行碼鑑別機制，使用者必須針對不同的伺服器去註冊個人身分碼及通行碼，這是相當沒有效率的，所以已經不足以應付現在的環境。本論文提出一個以多伺服器環境為基礎的鑑別機制，能夠允許使用者從多台伺服器上取得服務且不需要對每一台伺服器註冊，大幅改善使用的效率。本論文所提出的方法除了能夠達到在多伺服器環境下的安全需求，也提供動態名稱來達到使用者匿名和追蹤的功能，此外我們的方法也提供註冊中心離線的鑑別功能，提升鑑別效率，並且抵擋大部分在通行碼鑑別環境下的多項攻擊。 With the rapid growth of computer network, more and more services are provided via Internet. Conventional password authentication scheme based on a single server cannot be efficiently used in modern environments. It is not efficient that a user registers his identity and password to every server which he wants to login. In this paper, we propose a password authentication scheme for multi-server environments. The scheme allows the user gets services from every server with only one registration. Our scheme achieves many securely requirements, provides dynamic ID, traceability and registration center off-line authentication, and resists many attacks in multi-server environments.
