“沃互联”统一认证方案研究与应用  

Research and Application on “Wo Connection” Unified Authentication Solution

作　　者：刘镝[1] 张尼[1] 王笑帝 Liu Di;Zhang Ni;Wang Xiaodi(China Unicom Reseach Institute, Beijing 100032, China)

机构地区：[1]中国联合网络通信有限公司研究院,北京100032

出　　处：《信息通信技术》2016年第6期17-22,30,共7页Information and communications Technologies

摘　　要：近年来,随着国内外网络用户隐私安全态势日趋严重,如何保障网络用户账户安全成为亟待解决的问题。针对现有网络认证系统面临的弱口令、"拖库"、"撞库"等安全挑战,文章提出"沃互联"统一认证解决方案,即基于SIM卡统一认证方案,为用户提供安全、便捷的认证能力。文章首先对现有网络认证系统存在的弊端进行阐述,然后对现有账户体系安全需求进行分析和讨论。根据安全需求,提出"沃互联"统一认证解决方案,介绍系统技术架构,展示系统核心模块功能、业务流程、应用场景。最后提出沃互联统一认证方案未来发展展望。In recent years, with the domestic and international network users privacy security situation is becoming more and more serious, how to protect the network user account security has become an urgent problem. Aiming at the weak password,"drag attack" and "collision attack" security challenge faced by the existing network authentication system, this paper proposes asimcard-based “Wo Connection” unified authentication solution to provide users with safe, convenient authentication capabilities.It describes the drawbacks on current authentication system firstly adn then analyzes security requirement of user informationprotection. According to the security requirement, it proposes “Wo Connection” unified authentication solution, including technical architecture, core components, work flows and scenarios. At last, it discusses the future work of the “Wo Connection” unified authentication solution.

关 键 词：沃互联 身份认证 认证卡应用 信息安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]