Research Of One-Time Password Authentication

Great changes have been taking place in the world, as approach of network information ages. One of the most important characteristics is the digitallization and confidentiality of the identity. So, how to authenticate one's identity exactly and protect the security of information become a critical social problem that shoud be figured out quickly. Identity authentication can be used to solve the consistency problem of visitors' physical identity and digital identity, and provides basis to manage the power of visitors for other security techniques. Accordingly, Identity authentication is the foundation of the whole information security systems, and is an important part of the network security. It can restrict the illegimate user to get the resource in the network. In special, password authentication is a very simple and practical identification schemes. But, there are a great deal of vulnerabilities in the typic static password. For the vulnerabilities, Leslie lamport, an American scientist, firstly proposed the idea of One-Time Password System(OTP)The theory of authentication which refer to this paper is discussed firstly. And the emphases of this discussion are about the classfied and actualization of authentication. And the theory and practice of OTP are discussed in detail. I analyze the security of this technique taking S/KEY and SAS identity authentication systems for example, point out the vulnerabilities. Because S/KEY and SAS can not resist the small number attack and replay attack.and propose an improved protocol. We add random number in this scheme they have passed the mutual identity authentication. Finally the scheme has been detailed designed and accomplished.