一种基于国密Ukey的云管理平台双因素身份认证方法  

A Two-factor Identity Authentication Method for Cloud Management Platform Based on State Secret Ukey

作　　者：刘玲星 唐卓 宋柏森 纪军刚 LIU Ling-xing;Tang Zhuo;Song Bai-seng;JI Jun-gang(Shenzhen Zhengtong Electronics Co.,Ltd.,Shenzhen 518000,China;College of Computer Science and Electronic Engineering,Hunan University,Changsha 410082,China)

机构地区：[1]深圳市证通电子股份有限公司,广东深圳518000 [2]湖南大学信息科学与工程学院,湖南长沙410082

出　　处：《电脑与信息技术》2023年第4期83-86,115,共5页Computer and Information Technology

基　　金：广东省重点领域研发计划资助(项目编号:2020B0101100001);广东省重点研发、深圳市科创委项目(项目编号:XMHT20210101020)。

摘　　要：鉴于传统云管理平台身份认证方法的局限性,文章提出了一种基于国密Ukey的云管理平台双因素身份认证方法。该方法通过在传统云管理平台身份认证中增加基于国密Ukey的认证方法,并与平台本身的账号密码认证方法结合实现双因素身份认证。实验结果表明,利用该方法进行云管理平台身份认证,不易攻破,能满足对安全保密等级要求较高的认证场景,同时能够实现密码国产化替代,符合我国强调自主可控的大背景。As limitations existed in the traditional identity authentication method for cloud management platform,a novel two-factor identity authentication method based on State Secret Ukey was proposed.By adding the authentication method based on the State secret Ukey to the traditional method,and combining the account and password authentication of the platform itself to achieve two-factor identity authentication.Experimental results show that this method can not be broken,and can meet the scenarios that require high security and confidentiality level.Also,it can realize the localization substitution of password,which is in line with the background of China's emphasis on independent and controllable.

关 键 词：云管理平台 双因素认证 国密 安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TN918.4[自动化与计算机技术—计算机科学与技术]