一种新型一次性口令身份认证方案的设计与分析

分析了常用的几种一次性口令身份认证方案，在挑战／响应方案的基础上设计了一种新型的身份认证方案。该方案不仅能够提供通信双方的相互认证，减少服务器的开销，而且克服了传统挑战／应答方案的弱点，有效地保护了用户身份信息，能防止重放攻击等攻击手段。最后对该方案的安全性和效率进行了剖析。

Design and Analysis of a New One-time Password Authentication Scheme

Some usual one-time password authentication protocols are analyzed. A new one-time password authentication scheme is designed based on challenge/response authentication method, which provides client/server with mutual authentication and can reduce server's overhead. It also conquers usual challenge/response protocol weakness and can protect user's identity and avoid replay attack etc. Finally its security and efficiency character are analyzed in detail.