基于手机令牌的动态口令身份认证系统的实现  

Implementation of a Dynamic Identity Authentication System Based on Mobile Phone Token

作　　者：叶晰[1] 叶依如[1] 岑琴[1] 

机构地区：[1]温州医学院计算机系,浙江温州325035

出　　处：《计算机系统应用》2010年第10期32-36,共5页Computer Systems & Applications

摘　　要：随着网络技术的普及,传统的静态密码方案已不能满足电子商务中的身份认证的要求。描述了动态口令技术的基本原理,分析了其软件和硬件实现的利弊,设计了一种基于挑战/应答模式的动态口令认证协议,并在此协议基础上设计实现了基于手机令牌的动态口令身份认证系统,论述了系统的总体设计、认证过程、安全性措施和具体的实施步骤,最后进行了系统的安全性分析。分析表明,该系统具有安全性高、适用面广,使用方便,系统成本低的特点。With the development of Internet technology,the traditional static password based authentication solutions are no longer an adequate protection scheme to serious enterprise applications.In this article,the principle of dynamic password technology is described,and the pros and cons of implementing dynamic password technology by software and hardware are analyzed as well.A dynamic password authentication protocol based on challenge/response mechanism is designed.The system＇s design authentication processes,and safety measures are described,and its security is analyzed as well.The analysis indicates that this system features high security and wide application.It can be conveniently used and implemented at a low cost.

关 键 词：动态口令 手机令牌 挑战/应答 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]