一种新的双向认证的一次性口令系统TAOTP  

A Type of New Two-way Authenticate One-time Password System

作　　者：王涛[1] 谢冬青[1] 周洲仪[1] 

机构地区：[1]湖南大学计算机与通信学院,湖南长沙410082

出　　处：《计算机应用研究》2005年第9期128-130,共3页Application Research of Computers

基　　金：湖南省自然科学基金资助项目(01JJY2115)

摘　　要：一次性口令系统是目前网上流行的简单用户认证方案,能够有效解决用户密码在网上明文传送的不安全性。分析了现有的几种一次性口令系统,指出服务端的不安全性、对S/KEY的小数攻击等问题,在此基础上提出并实现了双向认证一次性口令协议TAOTP(Two-way Authenticate One Time Password),采用单向函数,通过客户端和服务端实现的双向认证,解决了服务端存储用户口令的不安全性和小数攻击等问题。One-time password systems are popular simple user-authentication schemes in Internet. It can effectively resolve the un-secure way of password transfer in plan-text in Internet. This paper discussed some one-time password system, point out the defects such as un-secure server, small integer attack on S/KEY system, and so on. Also in this paper, by using hash function and implementation of client and server＇s two-way authentication, a framework of two-way authenticate one-time password system was carried out. It can resolve problems such as un-secure server and small integer attack.

关 键 词：用户认证 一次性口令 小数攻击 双向认证 单向函数 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]