基于Kerberos的身份認(rèn)證機(jī)制研究.pdf

1、河海大學(xué)碩士學(xué)位論文基于Kerberos的身份認(rèn)證機(jī)制研究姓名：許建申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：計(jì)算機(jī)應(yīng)用技術(shù)指導(dǎo)教師：張正蘭20040301AbstractThecomputernetworkwillrealizetheresourcesharingeffectivelybuttheresource—sharingandinformationsecurityisapairofcontradictionsAstheresourceshari

2、ngfurthertheinformationsecurityismoreoutstandingdaybydayHowtoguaranteethelegaluserslegalaccesstotesolBtcesandprotecthackers’attackshasbeenthemostlycontentofnetworksecurityThenetworksecuritymechanismhasseveralessentialfac

3、tors：authenticationauthorization，integralitynonrepudiationandconfidentialityAuthenticationisveryimportantandbasicsecurityserviceAndothersecurityservicesalldependonitAccordingtothesecurityproblem，thispapermakesalloveralls

4、tudyonuserauthenticationbasedontheKerberosprotocol，usingthetechniqueofpublickeyauthenticationandthetheoryofellipticcarvecryptosystem，Theprimaryresearchcontentsaresummarizedasfollows：1、Severaluserauthenticationsarcreviewe

5、d，andtheauthenticationprocessanddistributionmethodofsecretkeyofKerberosareanalyzedindetailThepaperalsoanalysesitsadvantageonauthenticationsecurityandpointoutallsortsofpotentialsecurityproblem2、Thepublickeyencryptionbased

6、algorithmisstudiedAlsotherelevantproblemofellipticcluyecryptosystemisdiscussedespeciallysuchasellipticcurvedisperselogarithmproblem、ellipticcurveselection、principleofencryptionsystemctc3、ImproveKerberosprotocolbasedOnpub

7、lickeyencryptiontechniqueanduserandomnumbermethodteplacetimestamptechnologypreventingreplayaRackItabandonstheweakpointsoforiginalprotocol。矗highersecurityofidentityauthenticationprotocolisdesignedandthesecurityandadaptabi

8、lityofthewholeprotocolgetfurtherimprovementAnduseBNAlogictheoriestoprovethecompletenessandvalidityoftheimprovedprotoc014、Onthebaseofformerresearch，anewmodelofuserauthenticationsystemisdesignedbasedontheimprovedKerberospr