基于标识符的Android客户端身份认证方案

Identity authentication scheme of Android client based on identifiers

利用Android移动终端软硬件自有的标识符信息,依靠Android系统这一可信第三方,确保标识符信息的真实可信,结合密码学中Hash函数以及异或、连接等运算构造出客户端应用的身份认证信息生成算法。通过对传统移动应用的账户注册和登录过程进行研究,将身份信息的生成和验证过程放在服务器端,使用户免去设置账户信息及口令这一繁琐且极易暴露隐私的过程,完成一种新型的身份认证方案。最后,对方案的安全性和效率进行了分析,结果表明,新的方案具有较强的安全性和较高的便捷性。

The Android mobile terminal＇s own identifier information was used, which was credibly ensured by the Android system, then combining the Hash function and operation such as xor or connection, an algorithm of authen- tication information generation for the Android client was created. The traditional mobile client＇s process of register and login were analyzed, putting the identity information generation and authentication on the sever. A novel authen- tication scheme was constructed, which made the users free from the cumbersome authentication process and pri- vacy divulges. Finally, the security and efficiency of the scheme were analyzed. The results show that the new scheme has strong security and high convenience.