基于手机令牌的动态口令身份认证系统  

A Dynamic Password Identity Authentication System Based on Mobile Phone Token

作　　者：张亮[1] 刘建伟[1] 

机构地区：[1]北京航空航天大学电子信息工程学院,北京100191

出　　处：《通信技术》2009年第1期253-255,共3页Communications Technology

基　　金：国家自然科学基金资助项目(编号:60672102)

摘　　要：随着无线网络的日益完善,通过手机无线接入Internet的用户不断增加,因此解决无线接入用户的身份认证问题极为重要。动态口令已经成为认证机制新的发展趋势,它提供了比传统静态口令更高的安全性。文中设计了一种基于挑战/应答机制的动态口令认证协议,并根据此协议设计了一个基于手机令牌的动态口令身份认证系统,论述了系统的组成、认证过程,分析了系统的安全性。分析表明,该系统具有安全性高、适用面广、使用方便、系统成本低的特点。With the improvement of wireless network, there are increasing users wirelessly accessing the Internet through mobile phones. So it is very important to solve the identity authentication problems of wireless access users. Dynamic password has become the new development trend for the Identity Authentication mechanism. It offers stronger security than the static password. In this article, a dynamic password authentication protocol based on callenge/rsponse mechanism is designed. According to this protocol, a dynamic password identity authentication system based on mobile phone token is designed. The composition and authentication processes of this system are described in detail, and its security is analyzed as well. The analysis indicates that this system features high security and wide application. It can be conveniently used and implemented in low cost.

关 键 词：手机令牌 动态口令 挑战/应答 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]