基于ECC的安全登录方案设计

DESIGN OF SECURE LOGIN SYSTEM BASED ON ECC

针对现有登录认证系统中存在的安全问题,设计了一种新的安全的登录系统方案.本方案采用对用户的登录信息进行过滤、摘要,并结合ECC算法的优点,对之进行加密传输,有效地防止了现有系统登录过程中存在的重放攻击、中间人攻击等安全性问题,并讨论其Java实现.

According to the secure problems existed in the login system, proposed a new secure scheme on login system, and then discussed the realization of the new secure scheme with Java. In this scheme, the login information is filtrated and digested, and transmitted in encryption form. It can effectively avoid the replay-attack and the man-in-the-middle attack in existed login system.