This paper designs a proxy type identity authentication scheme based on SSL VPN which is suitable for small and medium enterprises. In the proposed scheme, the authentication of the client uses the improved one-time password mechanism, there is no correlation between the password, and it use signature string ideological, some who only has both signatures string and security key can replacement the one-time password, and the authentication of the server by digital certificate.