认证协议是身份认证系统最关键的部分,研究和分析系统认证协议,是保证网络安全通信的必要条件。Kerberos是一个典型的认证协议,其使用专门的服务器进行统一的身份认证和权限管理,但是由于当初使用环境的原因,并没有使用公钥体制,这影响了系统的扩展性和易管理性。本文描述了一个身份认证系统认证协议的设计思想,使用公钥对kerberos协议进行了改进,并使用BAN逻辑分析了协议的安全性。 Authentication protocol is the most critical part of identity authentication system, research and analysis of system authentication protocol is necessary to ensure network security communications. Kerberos is a typical authentication protocol that uses a dedicated server for unified authentication and rights management. However, due to the original use of the environment, the public key system is not used, which affects the scalability and manageability of the system. This paper describes the design of an authentication system authentication protocol, using the public key to improve the kerberos protocol, and using BAN logic to analyze the protocol security.