一种新的一次性口令鉴别协议的设计

本文对ＲＦＣ２２８９（Ｒｅｑｕｅｓｔ ｆｏｒ Ｃｏｍｍｅｎｔｓ）所描叙的一次性口令系统进行了改进，使之成为网络／分布式系统中用户和节点间相互鉴别的一种新的协议即一次性口令鉴别协议（ＯＴＰＡＰ）。ＯＴＰＡＰ支持远程修改秘密通行短语和迭代值，可用于鉴别用户，也可以有效地防范假冒的登录节点，并能在用户和登录节节点之间建立可靠的保密信道。

The Design of a One-Time-Password Authentication Protocol

By ameliorating the One time Password System( OTP) described in REC2289,this paper proposes a One Time Password Auth entication Protocol (OTPAP) for in distributed systems or networks.The OTPAP al lows a user to modify his secret pass phrase in a remote place,even if his old secret pass phrase is published or his iteration is zero.With this OTPAP,server s and clients can be authenticated by each other and establish an authentic and secret connection.