基于事件的一次性口令双向认证的实现

针对静态口令身份认证技术易受攻击的安全缺陷，在事件同步一次性口令产生机制的基础上，结合公钥密码体制，设计并实现了一种新的一次性口令双向认证方案。与传统的挑战／响应双向认证方案相比，该方案实现简单、执行效率高，适用于电子商务过程中的身份认证，能够实现网络环境下用户和服务器的双向认证，避免各种攻击，可以大大提高用户访问的安全性，有效保护用户信息。

Two-way Authentication of Event-based One-time Password

In this paper, a new mutual authentication scheme is proposed, which is based on event synchronization one-time password mechanism and public key cryptosystem. This scheme could provide client/server mutual authentication and avoid various attacks. Thus the access security would be greatly enhanced and the user's information be effectively protected. Compared with the traditional challenge/response mutual authentication scheme, this scheme possesses the advantage of high security and efficiency.