S/Key身份认证系统的小数攻击缺陷分析及改进  

The Improvement and Small-number-attack Analysis Of S/Key Authentication System

作　　者：牛性年 

机构地区：[1]兖矿集团物资供应中心,山东邹城273500

出　　处：《计算机安全》2008年第10期33-35,43,共4页Network & Computer Security

摘　　要：该文在介绍S/Key一次性口令身份认证系统的基础上,对该系统的安全性进行了细致的分析,指出S/Key系统的重大缺陷——不能防止小数攻击,又在详细分析该缺陷的基础上,设计了一种方便有效,简单实用,易于理解的新的攻击方法,针对该攻击方法对S/Key系统进行了改进,进一步增强了S/Key身份认证系统的安全性。In this paper, at first, on the foundation of introduction of a one-time password identity authentication system---S/key system, we analyze the security of the system. One fatal defect of S/Key system----small-number-attack are analyzed particularly, and then, a new kind of attack method are designed, it is easily to understand and used, very convenient and effective. According to this attack method, we improve the S/Key system, and enhance the security of S/Key identity authentication system.

关 键 词：身份认证 多因子 一次性口令 小数攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]