一种改进的OTP身份认证算法分析与实现

Analysis and Implementation of an Improved OTP Identity Authentication Algorithm

分析一次性口令技术认证的优缺点,并在此基础上综合采用RSA、MD5等多种加密算法,设计出一种通过双向认证的新型一次性口令身份认证模型。结果表明,模型可以有效防御原有一次性口令认证存在的漏洞,如中间人攻击等,在安全性要求较高的场合下能够保障信息系统的安全。

A new type of one-time password authentication model RSA, MD5 and other encryption algorithms, based on analyzing of bidirectional authentication was designed with the pluses and minuses of one-time password au- thentication. Experiments indicated that the model could prevent effectively the loophole of the original one-time password such as man-in-the-middle attack. So it can keep the information system security in occasions of high secu- rity requirement.