检索规则说明:AND代表“并且”;OR代表“或者”;NOT代表“不包含”;(注意必须大写,运算符两边需空一格)
检 索 范 例 :范例一: (K=图书馆学 OR K=情报学) AND A=范并思 范例二:J=计算机应用与软件 AND (U=C++ OR U=Basic) NOT M=Visual
作 者:陈学锋 CHEN Xue - feng(Henan Institute of Technology, Xinxiang Henan 453000, Chin)
机构地区:[1]河南工学院,河南新乡453000
出 处:《计算机仿真》2018年第6期172-175,179,共5页Computer Simulation
摘 要:移动网络终端安全性使得人们注册的个人身份认证信息资料等受到来自网络的各种威胁,存在安全隐患。针对当前方法在对身份认证信息传输过程中容易被破译存在抗攻击性较差,且随着认证信息量的不断增加,时效性较差的问题,提出一种基于双重加密传输的身份认证方法,在移动网络终端单点登录身份认证过程中对于安全等级较高的用户数据信息采用非对称密钥进行加密。而对于安全等级较低的用户数据信息采用对称密钥进行加密,避免了单点登录身份认证信息数据传输被非法窃取。设计了一种移动网络终端单点登录身份认证协议,并对该协议的初始化阶段、注册阶段以及认证阶段进行了具体规定和描述,在移动网络终端单点登录身份认证过程中,将身份认证中心、票据授权中心以及票据验证中心进行集成,将移动网络终端应用系统解密得到的身份认证数据包时间戳与之前发送的进行比对,实现身份认证。仿真测试结果表明,所提方法具有良好的抗攻击性和时效性,且具有较好的预警能力。This article proposes an identity authentication method based on dual encryption transmission. Our research used asymmetrical secret key to encrypt data information of user with higher security level during identity authentication of single sign - on in ternfinal of mobile network and used symmetric key to encrypt data information of user with lower security level to avoid illegal theft of information data transmission during the identity authentication of single sign - on. The research designed an identity authentication protocol of single sign - on in the terminal of mobile network, then ruled and described initialization phase, registration phase and authentication phase of the protocol. The research integrated identity authentication center, bill authorization center and bill verification center. The research compared timestamp of data package of the identity authentication obtained by deeryption of application system in the terminal with the one sent before. Thus, we achieved the identity authentication. Simulation results show that the method has good anti - attacking performance and time validity. It has good early - warning ability.
分 类 号:TP312[自动化与计算机技术—计算机软件与理论]
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在载入数据...
正在链接到云南高校图书馆文献保障联盟下载...
云南高校图书馆联盟文献共享服务平台 版权所有©
您的IP:216.73.216.171