【摘要】 SRP(Secure Remote Password)是一种基于密码的强认证协议。本文分析了SRP协议的密钥交换机制,提出了一种基于SOPA和SRP-6协议的密钥交换与认证方案SRP-over-SOAP,并将该方案用于Web Service,实现了服务器和客户机间的双向身份认证。据我们所知,该方案是第一个将SOAP用于SRP-6协议的方案。更多还原

【Abstract】 Secure Remote Password(SRP)protocol is a strong network authentication mechanism. In this paper, we analyze the SRP protocol and propose an authertixation and key exchange scheme which is based on SRP-6 and SOAP (SRP-over-SOAP). As far as we know, this is the first implementation of SRP-6 over SOAP protocol. We also point out how to use this scheme to Web service for secure key exchange and authentication.更多还原