一种简单的远程动态口令认证方案  

A simple scheme for remote dynamic password authentication

作　　者：孟艳红[1] 李雅红[1] 黄静[1] 

机构地区：[1]沈阳工业大学信息科学与工程学院

出　　处：《沈阳工业大学学报》2005年第1期74-76,共3页Journal of Shenyang University of Technology

摘　　要：口令认证是身份认证的关键因素.分析传统远程口令认证系统的缺点,提出了采用动态口令来实现认证,并设计一种简单的、有效的远程动态口令认证方案.它利用了Hash函数(SHA函数)的单一性和唯一性产生数字摘要作为验证因子来进行认证,实现用户登录口令的动态变化,解决了远程登录的安全问题.该方案克服了一次性口令认证系统(S/KEY)的弱点,能抵御重传攻击,安全性好,计算量小,简单有效,具有较好的实用性.Password authentication is the key factor in identity authentication.In the paper,the idea of remote dynamic password authentication are proposed on the basis of analyzing the shortcomings of traditional remote password authentication system,a simple and effective authentication scheme is designed.The digital abstract generated by Hash function (SHA function) which has the oneness property is employed to realize the password dynamic changing for the client logging in a remote server.The scheme can overcome the disadvantages of one time password authentication system( S/KEY),can resist re-transmission attack and is a concise practical approach for identity authentication .

关 键 词：动态口令 哈希函数 口令注册 口令认证 种子 一次性口令 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]