一种基于动态二维码的图书馆安全身份认证方案

A LIBRARY SECURITY IDENTITY AUTHENTICATION SCHEME BASED ON DYNAMIC TWO-DIMENSIONAL CODE

针对高校图书馆身份认证方式单纯依赖校园智能卡的问题,以微信用户与微信公众号关联OpenID作为用户的身份标识,结合图书馆管理系统登录验证,提出一种二维码身份认证方案。为防止二维码包含的信息被篡改利用,增加时间戳后,利用AES加密算法对二维码内容进行加密,生成加密的动态二维码。在对多种图书馆服务设施升级后,通过实际应用测试,证明该方案在方便师生使用的同时,具有较好的安全性。

In order to solve the problem that the identity authentication in university library only relies on campus smart card,this paper proposes an identity authentication scheme based on the two-dimensional code.The OpenID connecting WeChat user account with public accounts was adopted as the user s identity,and the login verification of library management system was combined.In order to prevent the information contained in the two-dimensional code from being illegally used,the content of the two-dimensional code was encrypted by the AES encryption algorithm after a timestamp being added,and the encrypted dynamic two-dimensional code was generated.After upgrading a variety of library service facilities,through the practical application test,it is proved that the scheme is convenient for teachers and students,and has good security.