| 一种结合PKI技术的Kerberos改进协议 |
| |
| 引用本文： | 吴喜兰,舒远仲,江泽涛,邬志红.一种结合PKI技术的Kerberos改进协议[J].计算机应用与软件,2009,26(2). |
| |
| 作者姓名： | 吴喜兰 舒远仲 江泽涛 邬志红 |
| |
| 作者单位： | 南昌航空大学计算机学院,江西,南昌,330063 |
| |
| 基金项目： | 江西省重大攻关招标项目，江西省自然科学基金 |
| |
| 摘 要： | 分析、研究了Kerberos协议和它的多个改进方案,指出了Kerberos协议的一些局限性,在此基础上提出一种与PKI技术、访问控制相结合的Kerberos改进协议,并采用LDAP存储用户认证信息.与原Kerberos协议对比分析表明,在密钥存储、时钟同步、口令猜测、票据的不可否认性等多项性能方面有一定改进和提高,加强了Kerberos的安全性.
|
| 关 键 词： | 身份认种 |
AN IMPROVEMENT KERBEROS PROTOCOL WITH PKI TECHNOLOGY |
| |
| Wu Xilan,Shu Yuanzhong,Jiang Zetao,Wu Zhihong.AN IMPROVEMENT KERBEROS PROTOCOL WITH PKI TECHNOLOGY[J].Computer Applications and Software,2009,26(2). |
| |
| Authors: | Wu Xilan Shu Yuanzhong Jiang Zetao Wu Zhihong |
| |
| Affiliation: | School of Computer;Nanchang University of Aeronautics;Nanchang 330063;Jiangxi;China |
| |
| Abstract: | In the paper we analysed the Kerberos protocol and some of its improved schemes,and picked out some limitations of it.Based on these,an improved Kerberos protocol combining with PKI technology and access control was put forward,and LDAP was used for storing user's authentication information.Comparative analysis of original Kerberos protocol shows,the improved protocol has amelioration and improvement in more than one performances,including key storage,clock synchronization password guess and non-repudiation... |
| |
| Keywords: | Kerberos |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
