在线建立会话密钥身份认证协议的设计与实现

挑战-应答身份认证协议由于安全性较高,用户端运算量较小成为中小型网络应用系统十分青睐的身份认证解决方案。本文在分析、改进挑战-应答经典协议的基础上,从易于实现、符合用户使用习惯的角度,提出一种新的挑战-应答协议,并对其进行了安全性分析,在B/S模式下实现了应用。这种协议具有高安全性的同时,结构简捷,易于实现,而且能够让通信双方在线建立会话密钥,对加密随后的通信具有重要意义。

Design and Implementation an Authentication Protocol online Establishing a Session Key

Challenge-response authentication protocol has higher security and its client has a smaller amount of calculation, so it is a very popular Identity authentication solution in small network application system. This paper puts forward a new challenge-response protocol whose security is analyzed and implemented the application. The protocol has high security, simple structure, easy to implement and can let both sides of communication online to establish a session key, so it has a vital significance to the subsequent communication encryption.