基于短信息动态口令的企业办公网双因子安全系统的设计与实现

Design a Two-Factor Security System for Enterprise Office Network Based on SMS Dynamic Password

为了进一步加强企业办公网络安全系数,设计一种基于手机短信息的一次一用动态口令+用户静态口令的企业办公网身份认证双因子安全系统,并讨论其工作流程和安全机制。该系统通过架构短信息服务器平台,由算法程序产生动态随机校验码,以短信形式发送校验码到用户手机,用户利用手机接受到的动态校验码与用户静态口令登陆办公网。该系统可以使企业在不变更原有网络架构的基础上,加强办公系统的安全性。

In order to enhance the security quotiety of the enterprise office network,a two-factor security system for identity authentication which based on the SMS dynamic password and the user s static password is designed.the work flow and the ecurity mechanism are discussed.The system established a short message service platform,created randomly dynamic check code through the algorithm procedure and sended the check code as the short message to user s mobile phone.The user logins on the office network by the dynamic check code and the user＇ s password. This system would increase the security level without changing existing system.