一种基于移动终端的双因子身份认证系统

身份认证作为安全应用系统的第一道防线,是最重要的安全服务.通过分析基于用户名/密码的静态身份认证方案和一次性口令OTP各自的缺点以及恶意程序对二者安全的影响,提出了一种基于移动终端的双因子身份认证系统.分析测试表明,系统解决了口令猜测、小数攻击以及恶意程序带来的口令泄露等诸多安全问题,同时具备较好的运行效率.

A Double Factor Authentication System Based on Mobile Terminal

As the first defense line of secure application system, the identity authentication is the most important secure service. By analyzing disadvantages of username/password and one-time password, and the threat of malware, we proposed a double factor authentication system based on mobile terminal. Analyzing and testing of the prototype system indicated that the system can resolve problems such as password guess, small integer attack, password leak brought by malware, etc, and have well running efficiency.