期刊论文

Limited Authorization Password Mechanism

中文

计算机工程

Computer Engineering

1000-3428

2008

34

2

28-30

10.3969/j.issn.1000-3428.2008.02.010

国家部委基金资助项目

本校为其他机构

提出一种基于摘要机制的有限授权密码机制，使得用户可以在不泄漏密码本身的情况下允许其他用户临时拥有访问系统的权力。该机制可以抵抗密码分析攻击、字典攻击和强力破解攻击，具有较强的安全性，也可以扩展用来限制访问次数和访问权限，具有较强的实用性。该文同时给出了一个基于Java实现的原型系统。

A password mechanism based on digest technology is introduced, which allows one granting his fight to a temporary user with limited times and access. The mechanism can keep it off analysis attack, dictionary based attack and brute-force attack, and it is easy to extend to limit access count and authorization. A J...