远程网络环境下认证技术的研究

Research on Attestation Techniques in Remote Networks

在远程网络环境下,认证是建立网络安全系统必不可少的基本组成部分。该文首先介绍了常用的认证技术,包括口令认证、基于生物学信息的认证、基于密钥机制的认证及基于挑战/应答的认证机制,接着对常用的认证技术进行了详细的分析,并指出严重的漏洞,最后讨论了当前较有前景的认证技术,包括携带代码的证明的认证、语义远程认证及可信计算的远程认证机制。

Attestation is the basic component that is essential to establish network security system in remote networks.This paper describes different remote attestation techniques,password authentication,authentication of biological information,key Authentication,Challenge/Response authentication,then detailed analysis these remote attestation technique,points out serious loophole.at last discusses more promising authentication technology,proof-carrying code,semantic remote attestation and trust-based model.