信息网络安全

信息网络安全 ›› 2014, Vol. 14 ›› Issue (11): 46-51.doi: 10.3969/j.issn.1671-1122.2014.11.008

• • 上一篇    下一篇

基于手机动态密码的计算机使用权限管理机制

张庆阳1,2(), 杨阳1,2, 程久军1,2, 廖竞学1,2   

  1. 1.同济大学计算机科学与工程系,上海 201804
    2.同济大学嵌入式系统与服务计算教育部 重点实验室,上海 201804
  • 收稿日期:2014-09-17 出版日期:2014-11-01 发布日期:2020-05-18
  • 作者简介:

    作者简介： 张庆阳（1991-）,男,安徽,硕士研究生,主要研究方向：车联网、机器学习、隐私保护;杨阳（1991-）,男,山东,硕士研究生,主要研究方向：网络安全、物联网;程久军（1974-）,男,安徽,副教授,博士,主要研究方向：对等（P2P）网络、隐私保护、移动计算以及物联网等;廖竞学（1991-）,男,广西,硕士研究生,主要研究方向：网络安全、机器学习、车联网。

  • 基金资助:
    国家国际科技合作专项[2013DFM10100]

Mechanism on Computer Access Permission Management Based on the Mobile Clients' Dynamic Password Algorithm

ZHANG Qing-yang1,2(), YANG Yang1,2, CHENG Jiu-jun1,2, LIAO Jing-xue1,2   

  1. 1. Department of Computer Science & Engineering, Tongji University, Shanghai 201804, China
    2. Key Laboratory of Embedded System and Service Computing of Ministry of Education, Tongji University, Shanghai 201804, China
  • Received:2014-09-17 Online:2014-11-01 Published:2020-05-18

RichHTML

1

摘要：

信息化时代的到来,信息安全问题充斥着整个互联网领域。伴随着黑客技术的成熟,入侵个人计算机也已是一件易事,因而对个人计算机隐私和使用权限的管理显得尤为重要。然而常用的开机密码保护在朋友或同事要使用您计算机时会受到种种安全性考验。文章主要针对计算机使用权限的管理问题,基于RSA加密算法,提出了一种基于手机动态密码的计算机使用权限管理机制。首先,利用手机端与PC端共同作用提供动态密码,动态密码加密的设计在RSA加密模式基础上进行了一些优化与改进,利用明文编码和RSA加密算法生成动态密码,避免了时间种子生成动态密码的一些弊端,增加了密码破解的难度,也更加提高了加密的安全性。其次,提供了文件保护机制,给使用者设置不同的文件访问权限,并将这些信息融入到动态密码当中,计算机解锁后通过在内核中加载文件过滤驱动来保护用户私有目录的安全,提高了对系统敏感文件的防护等级。该机制立足于解决生活中计算机使用权限的难题,实现了用于计算机权限管理的手机动态密码系统。实验结果表明该机制有效解决了个人隐私和权限管理问题,具有较好的应用前景。

关键词: 安全防护, 手机动态密码, RSA, 权限管理

Abstract:

With the rapid development of information technology, the Internet area has inundated with information security problems. With the maturity of hacker technology, the invasion of a personal computer has become an easy task, so personal computer privacy and permission management have become more seriously in our daily life. Traditional methods that only use login password would threat to computer security and privacy when owner’s friends or colleagues use his computer. Based on the RSA encryption mode, we design a dynamic password encryption algorithm and propose a mechanism on computer access permission management mechanism. Firstly, the mechanism could increase the difficulty of password cracking and improve the security of encryption with the use of dynamic password created by both PC and mobile terminal. We combine plaintext coding with RSA encryption algorithm for dynamic password in order to avoid some problems of dynamic password generated by time seed algorithm. In addition, we added control information into the dynamic password, and loaded the filter driver of file in the kernel after the screen was successfully unlocked, therefore, owner’s private directory would be safer and the system protection grade of sensitive documents would be higher. The mechanism we implemented is aimed to solve as mall and awkward problem in our daily life. Experimental results show that mechanism on computer access permission management based on the dynamic password can solve the problem of personal privacy and access permission management effectively, thus it has a good prospect of application.

Key words: privacy protection, mobile clients' dynamic password, RSA, access permission management

中图分类号: