基于挑战-应答协议的VxWorks主机身份认证系统-软件工程专业论文.docxVIP

哈尔滨工业 哈尔滨工业大学工程硕士学位论文 - - II - Abstract The aerocraft control system generates various kinds of data when simulating flight, which are important bases for estimating the aerocraft control system’s status. They are technology intelligence that has scientific research and military value, and also have top confidentiality. The VxWorks host, working as device of confidential data acquisition and storage should be protected by highly strict identity authentication mechanism, in order to prevent the important information like simulating flight data from unauthorized access, copying, tampering or cracking by the illegal users. On the basis of deeply investigate identity authentication’s application environment and security threats in simulating flight data acquisition system, this paper presents an identity authentication scheme on the VxWorks host based on the OTP (one time passwords), according to static password identity authentication technology’s security flaws. The passwords used in the OTP identity authentication scheme change all the time and can not be predicted, which protects the system from different types of malicious attacks against static password scheme. In addition, double factors (holding factor and knowledge factor) greatly enhance the safety identity authentication security intensity. The thesis firstly mended the challenge-response protocol to fit the actual working system and analysed the security of the protocol that was mended; subsequently, it divided and designed the identity authentication system’s function modules, and then analyzed the three modules’ security and system’s security; and after that, it used cryptological technique to implement host identity authentication module, token module and configuration module; finally, an OPT identity authentication system on the VxWorks host was implemented. On the basis of suiting for application environment, the identity authentication system on the VxWorks host which was implemented in this paper has