本文提出了一種基于AES 實現的口令認證方法。該算法不使用公開密鑰算法，僅采用AES 進行遠程用戶的身份認證。該方法具有速度快，安全性高的特點，易于采用令牌（Token）或IC 卡硬件實現。在本文的最后，還對認證協議的安全性進行了討論。
關 鍵 詞： AES；哈希函數；認證協議
Abstract： An AES-based password authentication mechanism is proposed. The algorithm overcomes the conventional synchronization problem based on counter mode. Based on AES----a absolutely secure algorithm under present technology, this mechanism can be implemented with the properties of fast speed and high security, and it is easier to be implemented by Token or IC card hardware. Besides, one authentication protocol
is proposed, which is aimed at satisfying security and created by final authorization passcode and digital signature that is built by userID and local token. In the end, the security problems of the protocol at two aspects----algorithm security and protocol security are discussed, and AES-based password protocol is with high security is the result.
Key words： AES；Hash technology；Validation protocol