一种扩展应用边界安全设备认证能力的方法

为了保护内部网络的安全,必须设置应用边界安全设备.本文采取双服务器认证的方式,提出了一种扩展应用边界安全设备的认证方法,解决了一般的应用边界安全设备(如Socksv5服务器)使用用户名/口令字认证易受被动攻击等问题.新提出的用户名/口令字认证方式在安全性上比原有的方式具有更高的抗攻击的能力,而且用户还能自由地更改应用边界安全设备上自己的口令字.实验结果表明,效率上与原有的用户名/口令字认证方式基本保持一致.

A Way to Extend the Authentication Capability of Application Boundary Security Device

In order to improve the security of Intranet, application boundary security devices must be set. A scheme to extend authentication capacity at the application boundary security device is proposed here by using double servers, which solves the problems such as passive attack, etc. That is existed in the current password_based authentication schemes at the application boundary security devices like Socksv5 servers. Considering safety, the proposed scheme here has more power to resist against attacks while at the same time passwords stored in authentication database at the application boundary security devices can be freely changed by users. The experiment shows that the proposed scheme retains just the same efficiency as the old one is.