In password-based authentication systems, the username fields are essentially unprotected, while the password fields are susceptible to attacks. In this article, we shift our research focus from traditional authentication paradigm to the establishment of gatekeeping mechanisms for the systems. To this end, we introduce a Triple-Identity Authentication scheme. First, we combine each user credential (i.e., login name, login password, and authentication password) with the International Mobile Equipment Identity (IMEI) and International Mobile Subscriber Identity (IMSI) of a user's smartphone to create a combined identity represented as "credential+IMEI+IMSI", defined as a system attribute of the user. Then, we grant the password-based local systems autonomy to use the internal elements of our matrix-like hash algorithm. Following a credential input, the algorithm hashes it, and then the local system, rather than the algorithm, creates an identifier using a set of elements randomly selected from the algorithm, which is used to verify the user's combined identity. This decentralized authentication based on the identity-identifier handshake approach is implemented at the system's interaction points, such as login name field, login password field, and server's authentication point. Ultimately, this approach establishes effective security gates, empowering the password-based local systems to autonomously safeguard user identification and authentication processes.

翻译：在基于密码的身份认证系统中，用户名字段基本不受保护，而密码字段则容易受到攻击。本文中，我们转变研究重点，从传统的身份认证范式转向为系统建立门禁机制。为此，我们提出了一种三重身份认证方案。首先，我们将每个用户凭证（即登录名、登录密码和认证密码）与用户智能手机的国际移动设备识别码（IMEI）及国际移动用户识别码（IMSI）相结合，创建为"凭证+IMEI+IMSI"形式的复合身份，定义为用户的系统属性。然后，我们赋予基于密码的本地系统自主使用类矩阵哈希算法内部元素的权限。在输入凭证后，该算法对其进行哈希处理，随后由本地系统（而非算法）利用从算法中随机选取的一组元素创建标识符，用于验证用户的复合身份。这种基于身份-标识符握手方式的去中心化认证在系统的交互节点（如登录名输入框、登录密码输入框和服务器的认证点）实施。最终，该方法建立起有效的安全门控，使基于密码的本地系统能够自主保障用户身份识别与认证过程的安全。