具有密钥自动分配功能的网络化口令认证系统

首先讨论了现有各种口令认证方法的特点，然后提出了一种可以进行密钥自动分发的不可重复口令认证方案。该方案具有以下基本特征：非法用户无法以重发攻击的方式入侵网络；主机系统可以自动分发加密密钥；用户不需事先取得加密密钥．可以不受限制的自由更改口令；系统管理者可以随时更改加密，解密密钥，并自动分发更新。显然，该方案在保持强安全性的同时具有很大的灵活性。

A Networked Password Authentication System with the Capability of Auto Key Distribution

This paper discusses the characteristics of existing password authentication systems firstly, and then proposes a networked password authentication system with the capability of auto key distribution. The new system has the following properties: illegal user cannot intrusion into the network system by the ways of replay attack, the hosts in the network can distribute the key automatically, no pre-distribution of encryption key is needed, the password can be changed freely. Obviously, this system can work with high security while maintain enough flexibility.