基于一次性口令的电子政务系统设计

口令鉴别是一种根据已知事物验证身份的方法,因为价格低廉、容易实现、方便使用等特点而被广泛的采用。但是这种鉴别方式同时也是用户鉴别机制中最容易攻破的形式。而OTP(One Time Password,即一次性口令)系统就是设计用来应付这种被动攻击形式的。本文开发的是一个采用了SSL单向鉴别、多因素身份鉴别技术的基于一次性口令技术的电子政务应用系统。

E-Government System Design based on the OTP

The authentication is the key part of the network security. It is also the main problem we should resolve. This scheme,which is bi-directional, using multi-mechanism to ensure safety authentication and providing a uniform authentication service to othere-government application system, meets the need of current e-government system. But authentication technology and e-governmentsystem are continually developing, there are still many problems need to be solved.