基于动态二维码的安全身份认证方案的研究  

Research on Security Authentication Based on Dynamic Two- dimensional Code

作　　者：郑君[1] 李海霞[1] 

机构地区：[1]湖北理工学院计算机学院,湖北黄石435003

出　　处：《湖北理工学院学报》2015年第2期35-38,共4页Journal of Hubei Polytechnic University

基　　金：湖北理工学院大学生科技创新项目(项目编号:12cx35);湖北省教育厅重点项目(项目编号:D20144403);湖北理工学院创新人才项目(项目编号:13xjz06C)

摘　　要：提出了基于动态二维码的安全身份认证技术,通过网络授权隐藏用户实际登录口令,通过动态生成二维码授权确认用户身份。服务器端和用户端之间的交互访问由手机端作为中介,由于手机与客户绑定比较紧密,短信密码生成与使用场景是物理隔绝的,因此密码在通路上被截取的几率降至最低。避免了用户在登录过程中账号密码泄露的安全隐患,并且使身份认证过程变得更加简单。This paper presents the identity authentication technology based on dynamic two -dimension code which can hide the actual users＇ login password through network authorization and confirms user identity through dynamically generated codes. The interaction between the server and the user by mobile phone termi- nal as an intermediary, because the bound between mobile phone and customers more closely, and SMS password generation is physical isolation from usage scenarios, so the password is intercepted to the minimum in the channel. It avoids the potential safety hazard that leaks the accounts and passwords during login proce- dure, and let the authentication process is simpler.

关 键 词：信息安全 二维码 身份认证 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]