一种双向动态口令认证系统的研究

在研究现有身份认证系统中存在的安全问题的基础上,提出了一种双向动态口令认证方案,给出了方案的实现过程,并对方案进行了安全性分析。本方案的特点是:提供了服务器和客户的双向认证,能够抵御假冒攻击;双向认证的实现不需要依赖于第三方认证中心来实现;认证信息保持动态性,能有效防止重放攻击。

Research on A Mutual Dynamic Password Authentication System

Based on the study of the security problems in the existing identity authentication systems, this paper proposes a mutual dynamic password authentication system. The implementation of this scheme is presented and the security is analyzed. This scheme bearing the following characteristics: it provides mutual authentication between the user and server which can resist the impersonation attack; the implement of the mutual authentication needn't to depend on the CA; authentication information keep dynamic, so replay attack can be prevented effectively.