A FTP Mutual Authentication Scheme Based on Dynamic Password

FTP is a file-transfer protocol among computers and has been widely used for many years.However,it transmits both passwords and files in plaintext,thus is of the inherent security deficiency.With the continuous development of network applications,FTP has become a major means for information transmission in the government and enterprises.The transmission of sensitive information in plaintext form and with no effective authentication and security transmission mechanisms would do damage and hard to the state and enterprises.Therefore,the security of FTP communication system is particularly important.Based on the construction of secure FTP communication system,this paper first analyzes the deficiency of traditional FTP identity authentication,and compares the present-use authentication technologies,and then proposes a mutual authentication scheme based on dynamic password in combination of HASH function,symmetric encryption,and challenge/response mechanism.Finally,analysis on the scheme indicates that this scheme is of such capabilities as protection of user identity information,prevention of ID authentication attack,including playback attack,impersonation attack,etc.),and could achieve mutual authentication.