基于可信计算的口令管理方案  

Password Management Scheme Based on Trusted Computing

作　　者：陈爱国[1] 徐国爱[1] 杨义先[1] 

机构地区：[1]北京邮电大学灾备技术国家工程实验室,北京100876

出　　处：《北京邮电大学学报》2008年第5期93-97,共5页Journal of Beijing University of Posts and Telecommunications

基　　金：国家"973计划"项目(2007CB310704)

摘　　要：针对现有口令管理方案抗攻击能力和易用性方面的不足.提出了基于可信计算的口令管理方案.该方案借助可信平台模块的密钥管理、安全存储和授权访问控制等关键技术实现了口令管理中敏感数据的安全保护。增强了口令计算过程的安全性.通过与现有方案的对比,分析了该方案的安全性和易用性.结果表明,该方案能提高口令的强度和易用性,并且能够抵抗网络钓鱼攻击.The existed password management methods are not secured enough but inconvenient to change each account password. Based on the key technologies of trusted computing, such as key management, security storage and authorized access control, a new password management scheme is proposed. This scheme helps users manage multiple accounts by turning a single memorized password into a different password for each account. The implementation of the scheme is discussed and compared its strength and usability to those of related approaches. Unlike previous approaches, our scheme is both highly resistant to brute force attacks and convenient to execute a password change for each password. It also can prevent phishing.

关 键 词：可信计算 口令鉴别 口令管理 网络钓鱼 

分 类 号：TN309.2[电子电信—物理电子学]