摘要： 描述了一个具有入侵容忍特性的分布式身份认证系统，利用多代理和冗余共享验证服务器的设计，使得认证系统具有容忍入侵的能力。将用户密码数据分布存储在多个共享认证服务器中，使得少数服务器受到入侵时仍能继续提供认证服务并且不会暴露用户的密码信息，提高了认证系统的可用性及安全性。

关键词: 认证, 入侵容忍, 秘密共享, 代理

Abstract: This paper proposes a distributed authentication system with intrusion-tolerant feature. The authentication system is able to tolerate intrusions using the redundant proxy servers and shared authentication servers. With the method of distributing user’s key into several shared authentication servers, system continuously provides authentication services and not exposes user’s key even under intrusion. Through this scheme, the availability and security of authentication system are enhanced.

Key words: Authentication, Intrusion-tolerant, Secret sharing, Proxy