网络化制造系统动态身份认证的研究与实现  

Research and Realization of Dynamic Authentication in the Networked Manufacturing System

作　　者：应文兰[1] 李爱平[1] 徐立云[1] 

机构地区：[1]同济大学,上海200092

出　　处：《中国机械工程》2008年第11期1293-1296,共4页China Mechanical Engineering

基　　金：国家自然科学基金资助项目(50475168);上海市"十五"基础性研究重点项目(06JC14066)

摘　　要：分析了应用服务供应商(ASP)模式的网络化制造系统的特点及其身份认证需求。在研究USBKey数字证书认证模式的基础上,提出了一个新的认证协议,该认证协议吸取挑战/应答方式的优点,在原来的静态认证模式中引进动态因素,并结合时间戳技术防止重放攻击,通过判断挑战发出和应答返回的时间差来解决分布式系统中维持时钟同步困难的问题,从而加强身份认证的正确性和时效性,具有很高的安全强度和实用价值。Firstly,the characteristics of ASP mode-based networked manufacturing system and its requirements of authentication were analyzed. And then digital certification based USB Key authentication mode and its limitation were studied. Finally,challenge/response and time-stamp technologies were applied to reform a dynamic authentication protocol, and the time discrepancy between challenge and response was calculated to judge the authentication information and prevent replay-attack. Hence, the clock--synchronization difficulty in the distributed system is avoided and the validity of authentication process is enhanced.

关 键 词：网络化制造 身份认证 数字证书 USB KEY 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TH166[自动化与计算机技术—计算机科学与技术]