摘要
身份认证是信息安全理论和技术中非常重要的方面,通常,认证最大的问题是用户名和口令都以明文的方式在网络中传输,所以安全性不高,极易遭受重放攻击和字典攻击。论文立足于此,针对当前流行的一次性口令认证机制做出了总结,阐述了每种一次性口令认证机制的实现,并对其安全性及效率进行了分析。
Authentication of identity is very important in the Theory and Technology of Information Security.It is a very serious problem about authentication that Username and Password are transported in a clear-text mode on the Internet, therefore the security is poor, and it is vulnerable in front of replay attack and dictionary attack.This article summarize some popular schemas of One-Time Password, refers to the realization of each schema and amylase the security about them.
出处
《信息安全与通信保密》
2008年第11期64-66,共3页
Information Security and Communications Privacy
关键词
身份认证
一次性口令
安全性
Authentication of identity
One-Time Password
Security