J2EE平台双因素认证的设计与实现  

Study of Dual Factor Authentication System Based on J2EE Platform

作　　者：贾英涛[1] 郑建德[1] 

机构地区：[1]厦门大学计算机科学系,福建厦门361005

出　　处：《厦门大学学报（自然科学版）》2007年第1期43-46,共4页Journal of Xiamen University：Natural Science

基　　金：国家自然科学基金(60373077);厦门大学985二期信息创新平台项目资助

摘　　要：网络信息安全技术的发展,使得单一的用户口令(PIN)认证方式认证强度已经不能满足用户的安全要求.本文分析了单一认证的弱安全性,结合PKCS 11标准和J2EE平台的EJB组件技术,设计并实现了基于用户口令(PIN)认证和硬件USBKey数字证书身份认证的双重因素认证系统.在所建系统模型基础上,重点构建了双因素认证系统的安全认证协议和签名、认证算法.最后的测试结果显示,在与单一认证系统性能相近的基础上,安全性较高.Along with the development of network information security technology, authentication with single Personal Identity Number （PIN） becomes unsafe. In this paper,the insecurity of single PIN was analyzed. Then, a dual factor authentication system was designed. It combined Public Key Cryptography Standards 11（PKCS 11） with FAB component technology on the basis of PIN and UsbKey digital certificate. On the system model,the secure authentication protocol and algorithms were particularly designed and implemented. Finally,the test results show that its performance of security is stronger than the single PIN system with the similar performanee of system capability.

关 键 词：EJB(Enterprise Java Bean) 双因素 USBKEY PKCS 11(Public Key CRYPTOGRAPHY Standards 11) J2EE 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]