摘要： 分析了常用的几种一次性口令身份认证方案,在挑战/响应方案的基础上设计了一种新型的身份认证方案。该方案不仅能够提供通信双方的相互认证,减少服务器的开销,而且克服了传统挑战/应答方案的弱点,有效地保护了用户身份信息,能防止重放攻击等攻击手段。最后对该方案的安全性和效率进行了剖析。

关键词: 身份认证, 一次性口令, Hash函数, 加密

Abstract: Some usual one-time password authentication protocols are analyzed. A new one-time password authentication scheme is designed based on challenge/response authentication method, which provides client/server with mutual authentication and can reduce server's overhead. It also conquers usual challenge/response protocol weakness and can protect user's identity and avoid replay attack etc. Finally its security and efficiency character are analyzed in detail.

中图分类号: 

• TP309.2