基于Java手机的一次性密码认证方案  

Authentication Scheme Based on One-time Password and Java Mobile Phone

作　　者：杨建强[1] 袁磊[1] 

机构地区：[1]襄樊学院数学与计算机科学学院,湖北襄樊441053

出　　处：《襄樊学院学报》2010年第5期40-43,共4页Journal of Xiangfan University

基　　金：湖北省教育厅科研项目(D20092505);襄樊学院科研项目(2009YB026)

摘　　要：一次性密码认证方案比常见的用户名/密码认证方案要安全得多.文章提出了一种基于质询/响应协议的Java手机的一次性密码认证方案,方案中产生一次性密码的密钥由改进的Diffie/Hellman协议完成交换,还采用了保护MIDlet、密钥、通信链路等的安保措施.方案的实施应用,除手机外,用户并不需要添置额外的硬件设备.该方案可以作为已有的认证方案如用户名/密码方案的替代方案,具有很好的安全性及应用前景.The one-time password authentication scheme is more secure than the common user name/password authentication scheme.A Java mobile phone-based,one-time password authentication scheme,which is based on a challenge-response protocol,was presented.The key,which as one of two arguments for the generation of the one-time password,is securely exchanged through the use of the improved version of Diffie-Hellman.The scheme also uses other security protection measures,such as protect the MIDlet and secret key,as well as protect communications links and so on.In addition to mobile phones,users do not require additional hardware devices.The security measures used in the scheme make it a good alternative for the existing authentication scheme,such as user name / password authentication scheme.This scheme has good application prospects.

关 键 词：JAVA手机 密码认证 一次性密码 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]