身份认证是实现应用级数据安全的一个重要技术手段,传统的认证机制采用静态密码,网络窃听、木马程序、截取/重放、钓鱼网站等各种手段都可以破解这种认证方式。一次性密码引入不确定因子,采取多因素产生方式,每次认证都使用不同的密码,大大降低了密码被破解的风险,加强了系统的安全性。本文介绍了一次性密码的原理、运行机制、认证过程和一个基于SHA2哈希加密的OTP产生算法。
Identity authentication is an important approach to realize application level data security. In traditional authentication mechanism, static password is adopted that can be cracked by Sniffer, Trojan, Record/Replay and fishing web site etc. so easily. One Time Password reduces password cracked risk a lot. It generates another password each time by moving factors used. Principles, working mechanism and authentication processes of OTP are introduced in the paper, and then an OTP generating algorithm based on HMAC-SHA2 is proposed.