Research on principles and methods of designing authentication protocols against replay attack

Replay attack is the most basic,dangerous and frequently used form of attacking authentication protocols.The radical causes of replay attack from the perspectives of server and entities of authentication protocol are analyzed and a set of principles and methods of designing authentication against the replay attack are put forward.The Adadi-Needham revised version of the Otway-Rees protocol and BAN-Yahalom protocol are analyzed and improved by using these principles and methods.The designing principles and methods are ef-fective in designing authentication against the reset attack.