基于WPKI的双因素认证方案  

Dual-factor authentication scheme based on WPKI

作　　者：鹤荣育[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机工程与设计》2009年第1期35-37,135,共4页Computer Engineering and Design

基　　金："金盾"工程基金项目(J1GAB23W013)

摘　　要：随着基于互联网的服务(电子商务、电子政务)的普及,为企业资源访问提供强认证的需求显得非常重要,因此双因素认证成为研究的重点。然而当前的双因素认证系统存在信道单一、部署成本昂贵的问题。利用STK技术设计了一个能够实现WPKI功能的安全SIM卡--PK-SIM卡,将WPKI引入基于SIM卡的认证系统中,利用加密短消息作为信息载体,设计并实现了一个双因素身份认证系统。重点介绍了该的组成原理、工作流程,并分析了系统的安全性。The need for affordable stronger authentication for enterprise access is getting more urgent with the pervasion oflnternet- based service, such as E-commerce and E-government. Most of the studies focus on dual-factor authentication. However, existent authentication system based on dual-factor using a single channel generates an expensive authentication system. In this contribution, a PK-SIM card is designed and realized based on STK technology firstly, which is a regular SIM card with additional WPKI-functionality and is used in any mobile phone which support STK function. Using the encrypt-SMS, then, a secured remote access scheme based on the PK-SIM card is presented. The architecture and workflow of the authentication scheme is introduced in detail, and its security is analyzed as well.

关 键 词：双因素 STK 身份认证 短消信(SMS) SIM卡 WPKI 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]