信息管理系统的口令安全方案

Secure the Password of MIS

在ＭＩＳ系统的用户口令管理中引入单向函数和智能卡技术，单向函数使得入侵者从口令表中只能浏览到用户的加密口令，并且从加密口令获得用户的秘密口令是非常困难的；智能卡的引入使得用户的登录依赖于不易仿制的外部存储装置，因此这样的ＭＩＳ系统有效地保护了用户的口令，具有较高的安全性能．

In this paper, one way functions and smart cards are introduced into the management of user's password in MIS. With one way function, the attacker can only browse user's public password, and it is very difficult to deduce the user's secret password from the public password; with smart cards techniques, the system doesn't store the password table, it requires that user's smart card be present while logs onto the system, so the MIS is highly secure.