电子认证令牌安全研究

Research of Electronic Authentication Token Security

电子认证的目的是建立以电子方式提交到信息系统的用户身份的可信性,电子认证令牌用于在电子认证过程中证明用户的身份。本文介绍了电子认证令牌及其使用,分析、例举了令牌面临的安全风险,给出了令牌安全风险的缓解措施。

The purpose of electronic authentication （e-authentication） is establishing confidence in User identity presented to the information system electronically. Electronic authentication token is used to authenticate the Claimant＇s identity in electronic authentication process. This article introduces the e-authentication token and token usage, analysis, enumerates the potential security risks of e-authentication token, and gives mitigation measures of e-authentication token security risks.