基于电子钥匙的远程访问VPN身份鉴别方案

Authentication Scheme of Remote Access VPN Based on Electronic Key

文章阐述了远程访问VPN应用中进行身份鉴别的目的。提出了一种基于电子钥匙的应用于远程访问VPN的身份鉴别方案。该方案采用电子钥匙承载远程访问客户端的鉴别信息,是一种双因素的、双向的身份鉴别方案。该方案能有效对抗拒绝服务攻击,并能在鉴别不同步的情况下,实现鉴别再同步。

The describes the authentication purpose in the application of remote access VPN. An authentication scheme based electronic key is proposed, which is used in the application of remote access VPN. The scheme uses electronic key to store the authentication information of remote access client. It is a two-factor, two-way authentication scheme. It can be effectively against denial of seIvice attacks and achieve resynchronization of authentication in the event of non-synchronous circumstances.