摘要： 详细讨论了“一次性口令”认证技术的原理和实现过程，分析了常用ＯＴＰ认证存在小数攻击等安全漏洞，提出了一种使用公开密钥密码体制加密用户通行密语（ｓｅｃｒｅｔ ｐａｓｓ　ｐｈｒａｓｅ），类似于ＨＴＴＰ摘要认证的ＯＴＰ改进方案和Ｊａｖａ实现方法．

关键词: 网络安全, OTP认证, Java

Abstract: This paper describes the principle and implementation of one-time password authentication technology, analyzes the weakness of frequently used "one-time password" authentication method like small number attack, and presents the improvements which is similar to HTTP digest authentication and implements by Java.

中图分类号: 

• TP393