【作者】 丁敏；

【导师】 林涛；

【作者基本信息】 河北工业大学 ， 计算机应用技术， 2014， 硕士

【摘要】 伴随当今网络广泛普及，产生诸多安全问题，如恶意软件肆虐（像蠕虫病毒Flame）、黑客攻击（像维基解密网站遭受持续攻击）、个人隐私泄密（像LinkedIn用户密码(password)泄露、云存储Dropbox账户被盗）、操作系统安全（像Android系统）以及棱镜门事件等网络安全事件。当下，信息科技产生的网络安全问题已经上升到国家战略高度。在众多网络安全策略中，身份认证是网络安全的基础。文中分析了传统静态密码身份认证机制及其种种弊端，这类弊端使得它无法保障其安全性，因此动态密码认证技术应运而生。然而传统动态密码身份认证仍然存在认证效率低，安全强度不高的缺陷。文中对密码学技术及相关理论、数字签名技术以及动态密码身份认证技术进行了深入研究，提出了本文改进的动态密码身份认证机制。本文采用将MD5密码算法、改进的ELGamal密码算法以及登陆次数相结合，并对其所涉及的各个环节进行了改进，比如ELGamal算法中的大素数生成阶段，大数幂模运算，数据库存储数据方面以及认证机制过程等进行了改进，设计了一个基于挑战/应答的改进的动态双向身份认证机制，使其具有更高的安全性和效率。最后对其性能、安全性和精确度等方面进行总结和分析，最后将这种认证机制应用在了云平台上。更多还原

【Abstract】 In modern times,the internet technology is widely popularization. Along with itproducting many security problems, such as malicious software wantonly events(suchas worm virus Flame), hacker attacks(such as wikipedia website under sustained attack), individual privacy leaks(such as the electricity accounts reveal,dropbox accountof Cloud storage stolen), operating system security events(such as the Android system) and the controversial prism door and so on.All this shows the network securityproblem has risen to the height of national strategy. Among the many network security stratege,identity authentication is the base of network security.This paper introduces the traditional static password identity authentication mechanism and its shortcomings,and such disavantages make it unable to ensure security.So the dynamic identity authentication technology emerges at the right moment,However,the traditional dynamic password authentication efficiency is so low and its security intensity is not high.This paper studys the technology of cryptography and its related theory,the digital signature technology and dynamic password authentication technology.Based on these,in this paper proposing a improved dynamic password authentication mechanism.This paper uses the MD5,improved ELGamal password algorithm,and combination with log numbers,and also improved every link it involves,such as the big primenumber generation phase in the ELGamal algorithm,large power modular arithmetic,the data storage in the database, the improvement of the authentication mechanismand so on,make it has the higher security an efficiency,Based on these,designs a improvement challenge/response authentication mechanism,makes it has higher securityand efficiency.Finally makes analysis and summary about its performance,security,accuracy,etc.And applying this kind of authentication mechanism to the cloud platform.更多还原