【作者】 丁要军；

【导师】 施荣华；

【作者基本信息】 中南大学 ， 通信与信息系统， 2005， 硕士

【摘要】 认证对于许多基于网络的应用来说是必不可少的环节。在安全的网络通信中,涉及的通信各方必须通过某种形式的认证机制来证明对方的身份,验证用户的身份与所宣称的是否一致,然后才能实现对于不同用户的访问控制和记录。认证是其它安全服务的基础。远程强认证技术是解决网络环境下认证问题的有力手段。 在分析了认证系统的基本理论之后,本文探讨了动态密码机制,分析了其原理,安全性能及实现机制,为研究和发展动态认证机制提供一定基础。深入研究了远程强认证技术的特点,指出认证系统的安全强度取决于参与认证的因素及其结合方式,并运用组合论和概率论的知识,建立了它们之间关系的数学模型,为设计强认证系统提供了指导思想。接着作者改进了基于动态口令认证的S/KEY认证系统,使之成为一个更安全可靠的系统。针对单纯认证的局限性,结合PKI技术,指出了利用存储于智能卡内数字证书的强认证机制将是网络应用的较好的解决方案。最后给出了一个基于USB Key安全认证的互联网物配系统,给出其简化方案,并开发了相应程序。 利用动态加密机制来改善认证系统的安全的思路具有启发性;针对强认证系统安全强度的分析,指出了人们某些认识上的误区,所建立的数学模型对于强认证系统的设计具有指导意义;将智能卡技术和PKI技术结合起来,给出的远程强认证方案及其程序具有实用价值。更多还原

【Abstract】 Authentication is absolutely necessary to many Internet services. In a secure network communication, each side has to prove its identity to the other through some mechanisms, and correspondingly, each side should validate the other’s identity to know whether he has the right. Then the access control and accounting can work on. Authentication is the basis of other secure services. The remote strong authentication technique is a powerful way to solve the secure problems under network environment.After analyzing the elements in an authentication system, the author discusses the dynamic encrypt mechanism, its security feature and realized implemental scheme, which provides the theoretical basis of dynamic authentication scheme. The author researches the remote strong authentication technologies and points out that the authentication system’s security intensity depends on the elements in it and the way the elements joint together. Using theories in combinatorial math and probability, an arithmetic model that shows the relation between security intensity and the elements is set up. And this model provides the guiding principle for designing the remote strong authentication system. The author improves the S/Key authentication system based on the dynamic password authentication and makes it a more secure scheme. To overcome the limitation of pure authentication, a mechanism using smart card with digital certificate in it is brought forward. Finally a USB key based distribution system of e-shopping is listed as an example, a simpler scheme is discussed, and corresponding programs are also given.It’s worthy to notice: the enlightenment from dynamic encryption mechanism improving authentication system’s security, the guidance from the arithmetic model for designing strong authentication system, the scheme that based on smart card technique and PKI if safe and efficient.更多还原