Research And Implement Of A Two-Way Identity Authentication System Integrating One-Time Password And Fingerprint Recognition

As basic requirement of application system security protection and denfense, identity authentication is the foundation and core of system security. This paper attempts to study the identity authentication issue in network application system on the basis of a project "Research on Identity Authentication of Public Security Business System" of Gansu Provincial Committee of Science and Technology. The main research results of the paper can be concluded as follows:1. Analyze kinds of identity authentication schemes at home and abroad, focusing on three identification technologies including static password, one-time password and biometrics.2. Analyze the root causes why small integer attack exsits in S/Key, secret pass phrase is easily spied and fingerprint is easily eavesdropped. Propose a two-way identity authentication sheme integrating one-time password based on S/Key and fingerprint recognition.3. Design a two-way identity authentication system integrating one-time password based on S/Key and fingerprint recognition. Mutually verify the other's identity between client and server with one-time password and fingerprint. Ensure identity information confidentiality, integrality and incontestability using AES and DSA. Ensure data transmission security on network connection between client and server using SSL.4. Implement the two-way identity authentication system integrating one-time password based on S/Key and fingerprint using Java.5. Analyze the security and performance of the system through experiment and test. Print out feasibility of system and its advantages in terms of security. And print out shortcomings in terms of performance and the need to improve.