基于短信动态口令的身份认证管理服务

Management service for authentication based on SMS dynamic password

针对配电馈线终端(FTU)智能手机人机交互接口MMI应用身份认证管理的技术要求,需要在配网调控制中心建设动态身份验证的服务器系统,以实现对手机MMI应用的安全防护。控制中心服务器侧的身份认证管理软件采用挑战/响应方式的动态口令身份认证技术,并使用手机短信实现认证信息的传输,微型加密算法TEA对短信内容进行加解密处理,从而实现MMI应用的异步双因子安全体系登录认证的目的。在分析研究相关理论、方法和实现技术的基础上,完成了身份认证管理软件的设计与实现,并在用户控制中心机房成功部署,达到了项目开发的目的。

Point at the technical requirements of authentication management for man-machine interface(MMI) application on smart phone of feeder terminal unit(FTU), the authentication server should be built in the distribution network control center to realize the security protection for the MMI application onsmart phone.In order to realize the purpose of login authentication for MMI application by asynchronous double factor security system in the control center service software, the dynamic password authentication technology was used with the challenging/responsing mode, and the authentication information was transmitted by the smart phone short message, and tiny encryption algorithm(TEA) was used to encrypt and decrypt the content of short message.On the basis of analysis and study of relevant theories and methods and implementation techniques, the authenticationsoftware was implemented which has been deployed in the user control center room. At last, the purpose of project development has been achieved.