基于WPKI的双因素认证方案

Dual-factor authentication scheme based on WPKI

随着基于互联网的服务(电子商务、电子政务)的普及,为企业资源访问提供强认证的需求显得非常重要,因此双因素认证成为研究的重点。然而当前的双因素认证系统存在信道单一、部署成本昂贵的问题。利用STK技术设计了一个能够实现WPKI功能的安全SIM卡--PK-SIM卡,将WPKI引入基于SIM卡的认证系统中,利用加密短消息作为信息载体,设计并实现了一个双因素身份认证系统。重点介绍了该的组成原理、工作流程,并分析了系统的安全性。

The need for affordable stronger authentication for enterprise access is getting more urgent with the pervasion oflnternet- based service, such as E-commerce and E-government. Most of the studies focus on dual-factor authentication. However, existent authentication system based on dual-factor using a single channel generates an expensive authentication system. In this contribution, a PK-SIM card is designed and realized based on STK technology firstly, which is a regular SIM card with additional WPKI-functionality and is used in any mobile phone which support STK function. Using the encrypt-SMS, then, a secured remote access scheme based on the PK-SIM card is presented. The architecture and workflow of the authentication scheme is introduced in detail, and its security is analyzed as well.