摘要
针对动态口令使用难题和已有动态口令管理方案的不足,结合现有的可信计算技术,提出了一种基于可信计算的动态口令机制;利用可信计算模块TPM的安全计算和存储能力,实现了安全的一次性口令认证方案;通过与四种典型方案比较,可以看出本机制增强了动态口令的抗攻击性和易用性,计算复杂度低且具有较好的抗暴力破解和重放攻击等安全能力.该技术已成功地应用于对电子交易活动进行安全保护.
Aimed at the difficulty of using a dynamic password mechanism and the inequity in its management plans,a dynamic password mechanism was proposed based on the trusted computing technique.The mechanism used TPM′s secure computation and storage abilities to achieve a secure onetime password authentication scheme.Through comparison with four typical scheme,this mechanism was proved to enhance the attack-resistance,usability,and lower computation complexity of dynamic passwords,and to have better security capabilities in resistance to brute-force,replay attack,etc. Thus it can be successfully applied to the security protection of the electronic transaction.
出处
《华中科技大学学报（自然科学版）》
EI
CAS
CSCD
北大核心
2013年第S1期383-387,共5页
Journal of Huazhong University of Science and Technology(Natural Science Edition)
关键词
安全
认证
动态口令
电子交易
可信计算
security
authentication
dynamic password
electronic transaction
trusted computing
