Based Two-factor Authentication System For Open Source Software Research And Application

Because of the popularity of the internet applications, more and more enterprises allows their employees to remotely access their network's resources to enhance the benefits and competitiveness. Along with the rapid developement of spy softwares stealing users' passwords, the raditional authentication scheme which uses a pair, the username and password, only to authenticate users, doesn't produce enough security because many passwords are very easy to be guessed. The Two-Factor Authentication (T-FA) schmeme is gradually accepted and used, because it can enhance authentication reliability. However, it is too expensive for a small business to build a T-FA system.Based on Open Source Software(OSS), this research aims at designing a T-FA system for the enterprise. Its system configuration is according to the LAPM (Linux OS Server, Apache Web Server, PHP progrmming language, MySQL database) system. Different from common T-FA schemes on the market, this thesis adopts the most popular tools -Short Message Service(SMS) and mobile devices to replace the expansive tokens. This will not only solve the compatiblity problems among different equipments but also greatly reduce the cost of implementation and maintenance. In addition, it provides more accurate and secure authentication.