利用智能手机控制主机安全登录系统的研究

J4 ›› 2014, Vol. 36 ›› Issue (03): 487-490.

利用智能手机控制主机安全登录系统的研究

巩建平1，胥亚娟1，巩炳辰2

（1.太原理工大学信息工程学院，山西太原 030024;2.浙江大学竺可帧学院,浙江杭州 310027）

收稿日期:2012-09-24 修回日期:2012-12-30 出版日期:2014-03-25 发布日期:2014-03-25

Research of controlling host security
login system using smart phones

GONG Jianping1,XU Yajuan1,GONG Bingchen2

（1.School of Information Engineering,Taiyuan University of Technology,Taiyuan 030024;
2.School of Zhu Kezhen,Zhejiang University,Hangzhou 310027,China）

Received:2012-09-24 Revised:2012-12-30 Online:2014-03-25 Published:2014-03-25

摘要/Abstract

摘要：

利用智能手机控制主机安全登录是一项智能终端与密码机制相结合的新一代登录技术。首先简要介绍了Winlogon和GINA相互关系及Windows系统交互式登录的基本原理，然后提出了Windows平台下利用智能手机（基于Android平台）控制主机安全登录系统的研究并阐述了该系统所使用到的关键技术及其优势。利用智能手机应用界面的强大功能及蓝牙通信基础，实现了结合手机和PIN的双因子认证机制，极大地提高了系统登录的安全性，同时也避免了额外的投资和携带的不便。

关键词: 双因子认证；Winlogon；GINA；蓝牙通信；智能手机

Abstract:

Controlling host security login system using smart phones is a new generation signon technology that combines intelligent terminal and password mechanism. Firstly, the relationship between Winlogon and GINA and the basic Windows system interactive logon principle are introduced. Secondly, the paper propose a system that a smart phone（based on Android platform）is used as an authentication factor carrier to control the host logon system under the windows platform. And the system's critical technique and advantages are described. The system uses the powerful functions of the application interface and the bluetooth communication of smart phones to realize the twofactor authentication mechanism with both the phone and PIN, largely improving the safety of the system as well as avoiding extra investment and inconvenience of carrying the phone.

Key words: two-factor authentication;Winlogon;GINA;Bluetooth communication;smart phones

巩建平1，胥亚娟1，巩炳辰2. 利用智能手机控制主机安全登录系统的研究[J]. J4, 2014, 36(03): 487-490.

GONG Jianping1,XU Yajuan1,GONG Bingchen2. Research of controlling host security
login system using smart phones [J]. J4, 2014, 36(03): 487-490.

参考文献

［1］Cao Tianjie, Zhang Yongping,Su Cheng. Computer system security［M］.Beijing:Higher Education Press, 2003.(in Chinese)
［2］Schneier B.Applications of cryptography［M］.Wu Shizhong, translation. Beijing:Machinery Industry Press, 2000. (in Chinese)
［3］Ma Jingang, He Yifei. Analysis of Windows2000 user login authentication model ［J］. Computer Systems & Applications, 2002(12):3637.(in Chinese)
［4］Jin Hui, Shi Jianjun, Design of Windows2000 logon systembased on thirdparty PKI authentication ［J］. Computer Engineering, 2004, 30(9):192194.(in Chinese)
［5］Cai Zhun, Li Daxing. Realizing smart key by GINA to logon Windows ［J］. Computer Applications,2002, 22(12):103104.(in Chinese)
［6］De Clercq J,Balladelli M.Windows 2000 Authentication［M］.NJ:Digital Press,2001.
［7］Hutz B,Fink J.The essentials of replacing the Microsoft graphical identification and authentication dynamic link library［M］.WA:Microsoft Corporation, 2001.
［8］You Jinyuan, Shi Meilin. The principle of Windows operating system［M］. Beijing:Machinery Industry Press,2002.(in Chinese)
附中文参考文献：
［1］曹天杰,张永平,苏成.计算机系统安全［M］.北京:高等教育出版社,2003.
［2］Schneier B.应用密码学［M］.吴世忠,等译，北京：机械工业出版社,2000.
［3］马金刚，贺轶斐.浅析Windows 2000的用户登录身份验证模型［J］.计算机系统应用，2002(12):3637.
［4］金辉，施建俊.基于第三方PKI认证的windows 2000登录系统的设计［J］.计算机工程，2004,30(9):192194.
［5］蔡准，李大兴.通过GINA实现使用Smart key登录Windows［J］.计算机应用，2002,22(12):103104.
［8］尤晋元，史美林. Windows操作系统原理［M］. 北京：机械工业出版社，2002.