改进的一次性口令认证方案

对张宏,陈志刚提出的一种新型的一次性口令认证方案（计算机工程,2003年第17期）进行分析,指出其存在重要数据存储、无法抵抗拒绝服务攻击等不安全隐患,结合一次性口令的简易性、密码学技术和USB Key介质对该方案进行改进,提出一种更加安全的认证方案,并对其进行安全性分析。结果表明,该方案具有操作简易性、保密性和存储安全性,且系统开销较小。

Improved Scheme of One-time-password Authentication

After analysing one one-time-password authentication scheme proposed by Zhang Hong and Chen Zhigang, some insecurities such as data storage and can not resist denial of service attacks are pointed out. The scheme is improved with simplicity of one-time-passwords and cryptography technology and the USB Key media. A more secure authentication scheme is produced and the safety analysis is given. Results show that the sheme is easy to operate, secret and safety, and has less system consumption.