动态身份认证方案及应用  

Dynamic Identification System and Application

作　　者：张亮[1] 张加亮[2] 

机构地区：[1]江苏警官学院,江苏南京210012 [2]江苏淮安信息职业技术学院,江苏淮安223001

出　　处：《重庆大学学报（自然科学版）》2004年第7期139-142,共4页Journal of Chongqing University

基　　金：江苏省教育厅自然科学研究所指导性项目(02KJD580001)

摘　　要：新颖、安全的动态身份认证系统主要由电子令牌、安全认证服务器、管理工作站、认证服务接口函数等组成。通过同步、非同步认证算法,生成"动态口令"。由于生成的口令间无相关性,无法预测、跟踪、截取、破译,能有效提高身份认证可靠性。简要介绍基于时间、基于事件同步、非同步认证原理,分析了动态认证技术安全性。针对目前证券业中身份认证问题,以事件同步认证为例,详细介绍动态身份认证技术在证券交易中认证流程、以及认证系统与客户系统的集成。Novel and secure dynamic identification system comprises electrical tokens, a secure identification server, a management workstation and application Programming Interface. Dynamic password is generated with synchronous and asynchronous identification algorithms. Since there is no correlation between passwords, they cannot be predicted, traced, intercepted or decoded. Thus the reliability of identification is enhanced. This paper first introduces principles of synchronous and asynchronous identification based on time and events, and then gives a through analysis of security in dynamic identification techniques. A brief introduction is given about identification issues in current stock industry. With event-based synchronous identification as an example, we give a detailed introduction of dynamic identification techniques with the application in stock exchange and integration of identification system and client system.

关 键 词：静态口令 动态口令 身份认证 动态认证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]