Dissertation > Excellent graduate degree dissertation topics show

Dynamic password -based authentication of online banking security

Author: QianXueHong
Tutor: WangZuo；JiangXiaoNing
School: University of Electronic Science and Technology
Course: Software Engineering
Keywords: E-bank Ientity Athentication Dynamic Password Challenge
CLC: TP393.08
Type: Master's thesis
Year: 2011
Downloads: 112
Quote: 0
Read: Download Dissertation

Abstract


The era of network has opened a new world, in which more traditional field has brought to people great convenient by network, as well as great challenges and tasks, one of which is how to keep kinds of intrinsic chacteristics, including confidence, privacy protection, identity authentication and non-repudiation.The problem of security of E-bank is gaining more concern. For now, static password is an identity authentication method widely used in user end. But, it can be stolen by system monitoring in user end and sniffering in network. For this, banks should extend security protection to every user’s desktop by strengthen the design of mechanism in identity authentication, wich can be realize by adding server’s active participation in user’s login precess. One time password(OTP) is such a scheme of identity authentication pointing to weakness of static password.OTP strengthen the security of password in transmission by mixing uncertainty into user’s login precess. From the beginning of its emerging, it has become an identity authentication model widely used in E-exchange of network. But, it is proved that appling of OTP only on process of identity authentication without connecting it with process of exchanging is easy to be suffered to the attack of man in the middle(MITM). So, a lot of enterprises make help of public key infrastructure(PKI). But, PKI has its own weakness, such as system complexity, high technique shreshold, high cost and Lack of unity in technique standard, etc.This dissertation discusses and analysises the advantage and shortage of kinds of OTPs, and present a sheme that connect process of authentication with process of exchanging seamlessly, which use outcome of authentication as initiation data of exchanging, so extened OTP into process of exchanging. This dissertation trie to build a set of system of dynamic password identity authentication which is based on MD5 and run in C/S model, and composed by module of OTP authentication server and client program responsible for dynamic password generation. The web server is used to communicate with client program, and authentication server is responsible to generate a challenge number and authenticate user’s identity. Aftwer that, server will send a one-time random number to user before every change, which is base on OTP and used to mixing with password to encrypt data flow. This shemes can resist to replay attack, MITM attack, and using crypt algorithms and hash function in design process, so keeping good security without complexity of PKI deploying.

Related Dissertations

  1. Effects of Several Immunostimulants on the Growth Performance, Non-specific Immunity and Disease Resistance of Cobia, (Rachycentron Canadum),S963
  2. Bank of the socialist market economy environment ethics training research staff,D648.1
  3. Network situation and promote socialist ideology Cohesion Strategies,D64
  4. The Credit Risk Analysis and Business Monitor in China Merchants Bank,F224.32
  5. Study on the Influence of Internal Marketing on the Satisfaction of Employee Job Satisfaction in Chinese Commercial Bank,F832.2
  6. Gansu Branch of Construction Bank to Explore the Development E-Banking Service,F832.2
  7. The information content of the commercial banks accounting policy choices,F830.42
  8. Bank of China, Gansu Branch of Economic Capital Management,F832.2
  9. Study on Electronic Banking Development Strategy of China Construction Bank Lanzhou Railway Sub-branch,F832.2
  10. Construction Bank Pingliang Branch Comprehensive Competitiveness Analysis and Promotion Countermeasures Study,F832.2
  11. Commercial Bank of China Bank Card Business Competitiveness Research,F832.2
  12. Study on the Development Strategy of Bank of Jiujiang Carbon Financial Business,F832.2
  13. The Design and Implementation of Intelligent Test Paper System,TP311.52
  14. Development and Challenges of the Shanghai International Tennis Tournaments,G845
  15. Research on Construction the Marxism Study-oriented Party,D26
  16. The opportunities and challenges brought about by the digital age online community to marketing communications,G206
  17. The Research on Countermeasures of Promoting Government’s Credibility at Network Background,D630
  18. Study on the Information Disclosure of Commercial Banks System,D922.281
  19. External financing for SMEs in China Legal System,F276.3
  20. Legal Regulation in Affiliate Transaction of Private Bank,D922.291.91

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile