动态身份认证方案及应用

Dynamic Identification System and Application

新颖、安全的动态身份认证系统主要由电子令牌、安全认证服务器、管理工作站、认证服务接口函数等组成。通过同步、非同步认证算法,生成"动态口令"。由于生成的口令间无相关性,无法预测、跟踪、截取、破译,能有效提高身份认证可靠性。简要介绍基于时间、基于事件同步、非同步认证原理,分析了动态认证技术安全性。针对目前证券业中身份认证问题,以事件同步认证为例,详细介绍动态身份认证技术在证券交易中认证流程、以及认证系统与客户系统的集成。

Novel and secure dynamic identification system comprises electrical tokens, a secure identification server, a management workstation and application Programming Interface. Dynamic password is generated with synchronous and asynchronous identification algorithms. Since there is no correlation between passwords, they cannot be predicted, traced, intercepted or decoded. Thus the reliability of identification is enhanced. This paper first introduces principles of synchronous and asynchronous identification based on time and events, and then gives a through analysis of security in dynamic identification techniques. A brief introduction is given about identification issues in current stock industry. With event-based synchronous identification as an example, we give a detailed introduction of dynamic identification techniques with the application in stock exchange and integration of identification system and client system.