摘要
为了加强应用系统用户口令的安全性,本文在口令访问控制模块中引入了单向哈希算法,提出一个安全用户认证模型,采取有效的数据加密技术来控制存取数据访问。通过哈希算法把用户身份认证信息加密后以密文的形式存放在数据库中,进一步提高了系统的安全性。对于身份认证,相对于明文的验证方式,哈希认证的单项散列特性使它更加具有安全性,对穷举攻击更具有抵抗性。
In order to enhance the security of the user password of the application system,this paper introduces one-way Hash Algorithm to the password access control module,proposes a secure user authentication model and takes effective data encryption to control data access.The Hash algorithm is used to encrypt the user identity authentication information and the encrypted information is store as ciphertext in the database so as to further improve the security of the system.Compared with the verifying method of the plaintext,one-way hash characteristic of the Hash authentication makes it more secure and resistant to the exhaustive attack.
作者
蒋志强
Jiang Zhiqiang(Zhixing College Of Northwest Normal University,Lanzhou,Gansu 730070,China)
出处
《计算机时代》
2018年第8期54-56,共3页
Computer Era
关键词
访问控制
身份认证
哈希算法
口令
数据加密
access control
identity authentication
Hash algorithm
password
data encryption
