针对网络开放的桥梁焊接质量监控系统存在非法访问、口令易泄露等问题,研究一种双因素身份认证方法.基于系统安全分析、可信完整性度量和分层管理原则,提出基于口令和指纹生物特征相融合的双因素身份认证方法,在桥梁焊接质量监控系统增加身份认证程序,通过访问者的口令和指纹特征生成用户身份识别信息,与预存储在认证服务器端身份凭证数据库中的用户身份信息进行比对,完成身份认证.实验结果表明该方法身份认证通过率总体在98.8%以上,可准确验证操作用户身份,可推广应用到其他监控系统中.%In view of existing problems of bridge welding quality monitoring system access to the Internet such as illegal access and password vulnerability,a method of two-factor authentication is proposed. Based on principles of system security analysis,trusted integrity measurement and layered management,a method of two-factor authentication based on the fusion of password and fingerprint feature is proposed. By adding an identity authentication program for bridge welding quality monitoring system and generating the user's identity information from the user's password and fingerprint feature, the method can match the user's identity information with the identity information stored in the authentication server in advance to finish identity authentication process. Test results show that identity validation pass rate is over 98.8% and the method can correctly verify the user's identity,thus it can be applied to other monitoring systems.
展开▼
