Research&Development Of One Time Password System Based Mobile Phone And Challenge-Response Mechanism

The paper is studying information security technology, especially study the accesscontrol and identification technology. The paper study and investigate and analyseexisting technologies, including static password, existing human recognition technology,existing dynamic one-time password technology based hardware token, existingone-time password technology based on SMS and mobile phone and analyse thosetechnologis’ characteristics and defects. The paper design a dynamic one-time passwordsystem that is mobile phone based and on challenge-response mechanism, and study thealgorithm involved in the systems. The paper illustrates the implementation details andanalyse the implementations, and present the real production systems.Furthmore, The paper also research and analyse the security of the system andadvance. The paper research and analyse the progress and evolution in the future ofdynamic one-time password system that is mobile phone based and onchallenge-response mechanism. The paper introduces its benefits in business andconceivable progress to the application in the future.The paper introduce the development of the mobile platform based dynamicone-time password user authentication management system product, which do notrequired precise time related spcieal hardware and Internet connected, also does notrequire a dedicated hardware, low cost, easy to carry. It has been adopted in CMCC, andproduce well business benefit. It also can completely eradicate the problem ofidentification issues in information security, information services, e-commerce andfinancial service.