双因素身份认证在网络信息安全管理中的应用

Application of Double Factors Identity Authentication to Network Information Security Management

为了提高公司网络设备安全管理水平,预防及控制网络安全风险,通过RSA动态令牌认证系统,结合标准Radius网络协议,部署双因素身份认证解决方案来确保网络资源访问的合法性,从而达到在日常网络设备运行维护中,网络技术人员可利用令牌动态口令登录设备,避免了定期更新口令的繁琐性,并可以通过查看认证服务器日志记录,及时发现登录信息、审计相关登录失败、拒绝信息等,消除安全隐患,预防及控制网络安全风险。

To improve the security management level of network equipments, prevent and control network security risks, this paper designs a double factors identity authentication solution, which integrates RSA dynamic token authentication system with the standard RADIUS protocol to ensure the legitimacy of network resources access. Application of this solution to routine network equipments operation and maintenance will help network managers to avoid regularly updating passwords by using token-based dynamic password authentication, to eliminate and control security hazards by looking up log files of the authentication server to find and audit login failure or refused information timely.