Design And Implementation Of Security Authentication Module Based On KERBEROS

With the development of the Internet today, the Internet has become an indispensable part of life. Communication, entertainment and shopping on the Internet have been very common. E-banking and virtual currency is also widely used. To ensure the user's personal information and legal security of property, it needs to authenticate users and prevent from unauthorized using of their related contents. So it requires a secure and stable network authentication system.In this paper, based on the Kerberos authentication system, designing and implementing a high-speed secure authentication system, to resolve the needs of the Internet authentication. This anthentication system is based on the Kerberos protocal. The Kerberos is researched and designed by MIT , using for internet authentication. And design the asynchronous and concurrency network to speed up data transmission speed in the network. When the data is transmitted in the network, in order to ensure the security of data, the senders encrypt the data, and the receiver decrypt the data. Against possible network attacks, using the appropriate security policy. For example, for network packet replay attacks on the data of authentication, it sets expiration time to increase security. In order to further improve the efficiency, the frequency of the underlying I/O operations uses the high-speed cache for data read and written, reducing the server-side data underlying I/O operations as much as possible.While using the Kerberos protocol, against the security risks in the Kerberos, combined with the actual project needs, providing relevant improvement. For example, the use of dynamic keys, greatly improves the security of user authentication. In other auxiliary services of authentication system, user location service is used to control the location of user to prevent the user?s account is login in other place. The anti-addicted service controls the young people's online time, in order to prevent minors indulging in online games.Through the system of mutual cooperation between the various modules, it finally achieves a network certified with secure, reliable, fast and stable demand. And the system can also plays a role in the local area network, such as in schools and companies.