一种二元对等身份认证方法的设计及实现  

Design and Realization of Terminal Security Access Based on Bidirectional Authentication

作　　者：王星慧 姜敏霞 颜光伟 WANG Xinghui;JIANG Minxia;YAN Guangwei(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司三十所,四川成都610041

出　　处：《信息与电脑》2023年第24期148-150,共3页Information & Computer

摘　　要：802.1x技术能够限制未经授权的用户通过端口接入局域网,但是由于缺少适用于对交换设备的认证协议,无法防止冒充的交换和路由设备接入局域网。因此,基于可信密码模块设计并实现了一种二元对等身份认证方法,在认证过程中引入随机数、签名和身份证书,在增强接入认证系统安全性的同时,有效减少了认证过程中的开销。802.1x technology can restrict unauthorized users from accessing the local area network through ports,but due to the lack of authentication protocols suitable for switching devices,it cannot prevent impersonating switching and routing devices from accessing the local area network.Therefore,a binary peer-to-peer identity authentication method was designed and implemented based on a trusted password module,which introduces random numbers,signatures,and identity certificates during the authentication process.This enhances the security of the access authentication system while effectively reducing the overhead of the authentication process.

关 键 词：可信密码模块 数字签名 双向身份认证 身份证书 

分 类 号：TN918[电子电信—通信与信息系统]