With the ground of information encryption technology , this paper analyzes network security architecture and makes deep research on user authentication on network application layer , especially on otp ( one - time password ) 本论文从网络安全体系结构分析入手，以信息加密技术为基础，对网络应用层的身份认证技术，特别是一次性口令认证( otp )技术进行了深入研究。
( 4 ) this thesis applies respectively the improved one - time password authentication mechanism and the status authentication mechanism based on the discrete logarithm problem in the points on elliptic curves over finite fields to business - to - client ( b2c ) and business - to - business ( b2b ) electronic commerce systems , and proposes a new framework model of electronic commerce status authentication systems 将改进的一次性口令认证技术和有限域上椭圆曲线密码技术ecdsa分别应用于bzc和bzb电子商务身份认证系统中，提出一种新的电子商务身份认证系统结构模型。 o ）结合智能卡技术，设计并实现了基于改进的otp技术和ecdsa算法的电子商务身份认证系统。
As a thinking of the information system security , the thesis presents an improvement to the one - time password system ( otp ) that is described in rfc2289 ( request for comments ) . a protocol , one - time password authentication protocol ( otpap ) , is brought forth for the authentication between users and nodes or nodes and nodes of a network / distributed system 在信息系统安全方面，论文对rfc2289 ( requestforcomments )所描叙的一次性口令系统( otp )进行了改进，提出了网络分布式系统中用户和节点以及节点间相互鉴别的一种协议即一次性口令鉴别协议( otpap ) 。
Three layer database oriented authorization plan by user - password grading , browser / server based one time password ( otp ) with timestamp and ip address binding , client side heart - beat detect method against tcp session stealing are implemented . and know how to use real - time antivirus technique and active kernel technique to anti computer virus 实现了基于三层数据库应用思想的用户口令分级授权方案、基于browser server的加入时间戳及绑定ip地址的一次一密用户口令加密方法、防止tcp会话截取的客户端心跳( heart ? beat )检测方法，实时反病毒技术和主动内核技术。
By the research to otp , a fault is discovered that a fake login user can acquire by cheating users the one - time password that will but not yet be used , and then log in successfully with the password . otherwise , if the user ' s secret pass - phrase leaked , the only thing that otp can do is initialization 通过对otp的研究，发现otp有一个缺陷：假冒的登录节点可以欺骗用户并获取该用户即将使用但是还未使用的一次性口令，并能成功地使用该口令登录；此外，如果用户的秘密通行短语泄密了， otp唯一能做的就是初始化。
With its smaller volume , lower price and better anti - jamming , singlechip have been widely applied in modern control system operating scene which have been put in collecting data in order to achieve shop floor control . the pic singlechip which is made by microchip co . in the u . s . a , with its risc architecture , high price verse performance ration , high speed , has been working in low voltage , lower power depletion , higer driving power , lower price otp technology and smaller volume , has been represents a new trend in the microprocessors ; as a transmission media , sms ( short message service ) which is a basic service in the gsm network , with its lower price and high reliability , has become important media in people ’ s daily life and trade communication ; led ’ s panel which has been applied in publishing the news and advertising in the enterprise is a control technic , a photoelectricity technic , communications technic , digital - image processing technic all rolled into one 单片机以其体积小、价格低、抗干扰性好等特点,在现代控制系统中常用在操作现场进行数据采集,以及实现现场控制。 pic单片机系列是美国microchip公司推出的,采用risc结构的高性价比嵌入式控制器,其高速度、低电压工作,低功耗,强大驱动能力,低价otp技术,体积小巧等都体现了单片微控制器工业的新趋势;作为信息的传输媒体, sms短消息服务是gsm网络的一种基本业务,以其低成本、高可靠性的方便快捷通信方式成为人们日常生活和商业交流的重要载体;集控制技术、光电技术、通信技术、数字图像处理技术于一体的led电子显示屏为企事业的信息发布和广告宣传提供了广阔的便利。
In this system the packet filtering rules are controlled intelligently by combining the intelligent mechanism with the package filtering mechanism ; to the proxy server , we develop a ftp proxy server decrypting witch with petri net model ; lastly , otp authentication are applied in authentication server 其中，本文将智能机制与包过滤机制相结合，通过推理机和知识库对包过滤规则进行智能化控制，实现了智能型包过滤路由器；在代理服务器部分，本文引入petri网模型对ftp代理服务器功能进行形式化描述并给出其具体设计方案；最后，本文将一次性口令系统运用于认证服务器，并对其进行了详细的设计。
Lkcc , a linux kernel concurrent communication mechanism , uses object transfer protocol to send and receive data 。 in order to improving system processing capability and to response client requests , session mechanism is changed ; because a great of source have several copy , multi - send is added ; because dps often has great load , some emergent message cannot be send duly ; capability of system is depressed , message pri is added to lkcc 为了改善系统的性能和满足用户的需求,将原来otp协议中会话的一一应答改成了组应答方式;由于dps系统的资源存在多个副本,所以在lkcc中加入了组播功能;又因为当系统繁忙时,某些紧急数据得不到优先发送,降低了系统的性能,所以本文又实现了对紧急数据的优先发送。
The system give the improvements of the original otp plan and add a systematic random number and time blunt which also use ras algorithm encrypt and decrypt the user ' s current secret language by way of the service ' s public or private key when the system carry out 对原有otp方案进行了改进，在生成一次性口令因子中增加了系统随机数及系统时间，并在系统实现时使用服务器的公钥私钥对由rsa算法加密和解密每个用户的通行密语，有效地阻止攻击者进行口令窃取和字典攻击。
As well as preserving the current advantages of otp , otpap also patches up some faults successfully : it can be used not only for the identification of users , but also for preventing effectively the fake login . besides , it can construct a reliable security information channel between the users and login nodes , and otpap also supports the remote modification of secret pass - phrases and iterative values even if the user ' s secret pass - phrase has been leaked or the iterative value has been zero Otpap除了保持otp现有的优点外，还成功地弥补了otp的这些缺陷： otpap不但可用于鉴别用户，也可以有效地防范假冒的登录节点，并能在用户和登录节点之间建立可靠的保密信道； otpap还支持远程修改秘密通行短语和迭代值，即使用户的秘密通行短语已经泄密了或者用户的迭代值已经为0 。
