一种基于可信计算的动态口令机制  

A dynamic password mechanism based on trusted computing

作　　者：刘帮涛[1] 罗敏[1] 陈爱国[2] 尹德辉[1] 

机构地区：[1]泸州医学院生物医学工程系,四川泸州646000 [2]电子科技大学计算机科学与工程学院,四川成都610054

出　　处：《华中科技大学学报（自然科学版）》2013年第S1期383-387,共5页Journal of Huazhong University of Science and Technology(Natural Science Edition)

摘　　要：针对动态口令使用难题和已有动态口令管理方案的不足,结合现有的可信计算技术,提出了一种基于可信计算的动态口令机制;利用可信计算模块TPM的安全计算和存储能力,实现了安全的一次性口令认证方案;通过与四种典型方案比较,可以看出本机制增强了动态口令的抗攻击性和易用性,计算复杂度低且具有较好的抗暴力破解和重放攻击等安全能力.该技术已成功地应用于对电子交易活动进行安全保护.Aimed at the difficulty of using a dynamic password mechanism and the inequity in its management plans,a dynamic password mechanism was proposed based on the trusted computing technique.The mechanism used TPM′s secure computation and storage abilities to achieve a secure onetime password authentication scheme.Through comparison with four typical scheme,this mechanism was proved to enhance the attack-resistance,usability,and lower computation complexity of dynamic passwords,and to have better security capabilities in resistance to brute-force,replay attack,etc. Thus it can be successfully applied to the security protection of the electronic transaction.

关 键 词：安全 认证 动态口令 电子交易 可信计算 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]