基于数字签名的优化动态身份认证系统  

Optimistic dynamic authentication based on digital signature

作　　者：丁振国[1] 刘多峥[1] 刘美玲[2] 

机构地区：[1]西安电子科技大学计算机学院,陕西西安710071 [2]西安电子科技大学软件工程研究所,陕西西安710071

出　　处：《计算机工程与设计》2009年第15期3511-3513,共3页Computer Engineering and Design

摘　　要：身份认证是网络安全技术的一个重要组成部分。分析了挑战/应答认证机制和数字签名技术的原理,针对现有的基于数字签名的动态身份认证系统的缺陷,提出了一种基于数字签名的优化动态身份认证系统。该系统将挑战/应答认证机制的挑战方向逆转,挑战发起动作由客户端实施。分析结果表明,该系统可以减少认证过程中双方的通信次数,同时可以抵御网络重放攻击,暴力攻击和防止网络窃听,支持双向的身份认证。User Authentication is one of the important parts in networking security. The principles of challenge/response scheme and digital signature technology are analyzed. For the existing defects among dynamic authentication based on digital signature, an improved dynamic authentication mechanism based on digital signature is put forward. The direction of challenge in the challenge/response scheme is reversed, which means the action of challenge is initiated by clients. Analysis shows that the mechanism can reduce the frequency of communication of both sides in authentication process. Meanwhile, the new mechanism can also defense network playback attacks, violent attacks, network Sniffers, and can support bidirectional authentication as well.

关 键 词：动态身份认证 挑战/应答认证机制 数字签名 数字证书 网络安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]