Analysis And Design On One-Time Password Authentication

With the improvement of social informationization, the information security, which is closely linked with people's own benefit, is getting more and more attention. The problems on how to identify one person and protect information are the key social issues to be solved in this information-based society. Identity authentication, which is at an important status in information security, is the base of visiting control. In the traditional identity authentication, static password authentication is the most simple and common-used identity authentication mechanism. Because of its own limitation the static password authentication can not offer sufficient visiting security. To solve this limitation the American scientist LeslieLamport was the first to bring forward the One-TIME Password (OPT for short) at the beginning of 1980s.First of all this paper has a detailed introduction of the authentication theory related to this paper, and discusses on the function and realization of digital signature as well as some common digital signature arithmetic. It also stresses on analyzing the realization methods of identity authentication and some common technologies on it. Next the theories on authentication technology and its realization of OPT authentication are discussed in detail. The security of this technology is also analyzed in this paper. At the end the scheme of the new OPT authentication based on APAKE and SAS-2 is brought forward. This scheme adds random city and independence of the authentication data to avoid the attacker forming and calculating the authentication data, which can increase the resisting attack.