一种B/S模式一次性口令系统  

One-Time Password Authentication System Based on B/S

作　　者：方俊[1] 

机构地区：[1]浙江越秀外国语学院网络传播学院,绍兴312000

出　　处：《计算机系统应用》2012年第9期124-127,78,共5页Computer Systems & Applications

摘　　要：由于B/S模式下客户机对服务器的验证困难,提出了使用.NET Remoting程序对网站的真伪进行验证,并使用神经网络方式实现了服务器端的认证信息的安全存储,客户端和服务器端的相互认证和每次认证产生不同的会话密钥,安全分析表明,所提的方案能有效防范钓鱼网站等的常见攻击,增加了系统的安全性.方案使用ASP.NET实现,证明是可行的.In the condition of the B/S mode, the authentication server is difficult implemented by a client. This paper puts forward to use .NET Remoting program to verify the authenticity of Web site and reaches storage safety of authentification message by useing neural network weight and also realizes mutual authentication between the client and the server, every time the authentication produce different session keys so on. Safety analysis shows that the proposed scheme can effectively prevent fishing websites against common attack, increase the system security. The scheme is achieved by using ASP.NET, It proved to be feasible.

关 键 词：身份认证 NET REMOTING HASH函数 神经网络 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]