基于SOAP和SRP-6协议的认证与密钥交换方案  

Authentication and Key Exchange Scheme Based on SRP-6 and SOAP

作　　者：李冬[1] 郭荷清[1] 

机构地区：[1]华南理工大学计算机科学与工程学院,广州510640

出　　处：《计算机科学》2006年第7期138-141,共4页Computer Science

摘　　要：SRP(Secure Remote Password)是一种基于密码的强认证协议。本文分析了SRP协议的密钥交换机制,提出了一种基于SOPA和SRP-6协议的密钥交换与认证方案SRP-over-SOAP,并将该方案用于Web Service,实现了服务器和客户机间的双向身份认证。据我们所知,该方案是第一个将SOAP用于SRP-6协议的方案。Secure Remote Password（SRP）protocol is a strong network authentication mechanism. In this paper, we analyze the SRP protocol and propose an authertixation and key exchange scheme which is based on SRP-6 and SOAP （SRP-over-SOAP）. As far as we know, this is the first implementation of SRP-6 over SOAP protocol. We also point out how to use this scheme to Web service for secure key exchange and authentication.

关 键 词：SRP协议 SOAP 认证 密钥交换 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TN915.04[自动化与计算机技术—计算机科学与技术]