An Improved OTP System Based on Bidirectional Virtual Authorization in Mobile Commerce

摘要：

This paper analyzed the shortages of S/KEY OTP system in mobile commerce identity authentication and suggested an improved one-time password system based on bidirectional virtual authorization in mobile application systems.On one hand,this suggestion can reduce the calculation stress of both client and server,accordingly increases the efficiency of authorization and withstands the DoS attack.On the other hand,the suggestion can implement the bidirectional authorization and reduce the possibility of fishing attack.

关键词： One-Time Password S/KEY Bidirectional Virtual Authorization anti-DoS anti-fishing

作者: Liang Wang Runtong Zhang

作者单位: Institute of Information SystemBeijing Jiaotong UniversityBeijing,China Institute of Information System Beijing Jiaotong University Beijing,China

会议类型: 国际会议

会议名称: 2008 IEEE International Conference on Service Operations and Logistics, and Informatics(IEEE/SOLI’2008)(IEEE服务运作、物流与信息年会)

会议地点: 北京

会议语种:英文

在线出版日期: 2008-10-12（万方平台首次上网日期，不代表论文的发表时间）