基于双因素认证技术的统一用户密码管理体系设计  

Design of unified user password management system based on two⁃factor authentication technology

作　　者：古振威 王佳 马腾腾 王依云 吴勤勤 GU Zhenwei;WANG Jia;MA Tengteng;WANG Yiyun;WU Qinqin(Power Dispatching Control Center of Guangdong Power Grid Co.,Ltd.,Guangzhou 510000,China;Guangzhou Power Supply Bureau of Guangdong Power Grid Co.,Ltd.,Guangzhou 510000,China;Network Security Division,Platform Security Branch of CSG Digital Grid Research Institute Co.,Ltd.,Guangzhou 510000,China)

机构地区：[1]广东电网有限责任公司电力调度控制中心,广东广州510000 [2]广东电网有限责任公司广州供电局,广东广州510000 [3]南方电网数字电网研究院有限公司平台安全分公司网络安全事业部,广东广州510000

出　　处：《电子设计工程》2023年第8期110-113,118,共5页Electronic Design Engineering

基　　金：广东省电网研究项目(GDKJXM20198529(6),GDKJXM20198529(7),GDKJXM20198529(8))。

摘　　要：为实现对用户对象的统一调度与管理,设计基于双因素认证技术的统一用户密码管理体系。按照Web服务架构的准入需求,连接信息节点接入与密码资源管理模块,搭建统一用户密码管理体系硬件平台。定义服务接口的应用内涵,通过完善用户密码信息管理流程的方式,建立双因素型认证函数,基于双因素认证设计密码管理技术,联合各级硬件设备结构,实现基于双因素认证技术的统一用户密码管理体系设计。实验结果表明,双因素认证技术支持下的密码管理体系能够较好破除用户信息资源间的干扰影响关系,实现对用户对象主体的统一调度与管理,具备较强的应用可行性。In order to achieve unified scheduling and management of user objects,a unified user password management system based on two⁃factor authentication technology is designed.According to the access requirements of the Web service architecture,connect the information node access and password resource management modules to build a unified user password management system hardware platform.Define the application connotation of the service interface,establish a two⁃factor authentication function by improving the user password information management process,design password management technology based on two⁃factor authentication,and combine hardware device structures at all levels to achieve unified user password management based on two⁃factor authentication technology system design.Experimental results show that the password management system supported by two⁃factor authentication technology can better break the interference and influence relationship between user information resources,realize unified scheduling and management of user objects,and have strong application feasibility.

关 键 词：双因素认证 统一用户 密码管理 WEB架构 节点接入机制 

分 类 号：TN-9[电子电信]