基于Kerberos系统的Windows2000认证机制的分析和改进方案

Analysis and new Scheme of Windows2000's Authority for Kerberos System

分析了Ｗｉｎｄｏｗｓ２０００系统的安全机制，介绍了Ｋｅｒｂｅｒｏｓ的认证过程，并分析了它的局限性．根据Ｗｉｎｄｏｗｓ２０００系统特点，提出了新的方案，解决了Ｋｅｒｂｅｒｏｓ系统各服务器的时钟难于同步性和鉴别码重放等不安全因素，加强Ｗｉｎｄｏｗｓ２０００的安全性．

In this paper, We analyze security mechanics of Windows2000, and analyze limitation of the Kerberos system, this paper puts forward a new scheme, The scheme disarmed factor of un-security, as reinal and non-synchronization.