Research On Dynamic User Authentication Mechanism In Android System

With the increasing use of Android system,the user authentication mechanism of Android system,especially the unity of its security and convenience,has become a hot topic in the research of information security.This paper mainly studies the security and convenience of pictorial gesture password authentication mechanism and digital password authentication mechanism.The following work is mainly done:(1)First,in view of the authentication cryptography security of the two authentication mechanisms,the dynamic changes of the authentication ciphers of the two authentication mechanisms are realized by increasing the number of times and random numbers,and the security of the two authentication mechanisms is improved.(2)Aiming at the cumbersome problem of drawing multi point authentication pattern for pattern cipher authentication mechanism,this paper reduces the number of authentication points by improving the authentication process,and improves the convenience of the authentication mechanism.The authentication process is improved to determine the number of authentication points according to the random number;according to the last authentication point of the last successful authentication,the starting point of the authentication is determined,that is,the last authentication point of the last successful authentication is the starting point of the authentication point.The improved authentication mechanism only needs the user to draw the pattern of the number of authentication points corresponding to the random number,and does not need to draw all the number of the number of authentication points.(3)Aiming at the cumbersome problem of digital cipher authentication mechanism input multi bit password,by improving the authentication process,the number of digital ciphers input by users is reduced,and the authentication convenience of the authentication mechanism is improved.The improved authentication process is that by calculating the sum of the 3 bit random number and the input number of the 3 bit user,and comparing the number of the addition sum results to the password stored in the system,the authentication is successful,otherwise the authentication fails.The improved user authentication mechanism can only be authenticated successfully if the user enters 3 bit password.(4)Finally,the convenience and security of the improved user authentication mechanism are analyzed through two aspects of theory and experiment.(1)The entropy value of the authentication cipher before and after the improvement of the user authentication mechanism and the number of the number of cryptographic spaces show that the entropy value of the improved password and the number of the cipher space are all greater than that before the improvement,that is,the security of the improved authentication mechanism is better than that before the improvement.(2)the experimental data show that the authentication time of the improved user authentication mechanism is less than that before the improvement.The experimental data also show that the improved user authentication mechanism can well resist attack attacks such as simulated dirty attacks,guessing attacks,shoulder peeping attacks,etc.On the whole,the improved user authentication mechanism has improved security and convenience.