一种融合多种安全技术的身份认证方案  

An Identity Authentication Scheme Integrate With Multiple Security Technique

作　　者：黄朝阳 

机构地区：[1]厦门海洋学院信息技术系

出　　处：《微计算机信息》2012年第9期413-414,435,共3页Control & Automation

摘　　要：分析了传统Kerberos协议认证过程的缺陷,借鉴其有关票据的概念并改良为轻量级票据引用,并引入公钥密码体制、USBKey、随机数等多种技术手段,提出一种更为安全高效的身份认证方案,并分析这一方案的性能。Firstly,the working process of traditional Kerberos protocol and the safe limitation of it is analyzed.Secondly,on the basis of improving the ticket of traditional Kerberos protocol by lightweight ticket index,a robust identity authentication scheme is proposed by the indroduction of multiple security technique,such as public key cryptosystem 、USB Key and random number.Lastly,the security and the efficiency of this improved schemes is discussed at length.

关 键 词：KERBEROS协议 票据引用 公钥密码体制 随机数 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]