腾讯QQ安全机制研究.pdf

摘 要 摘要 随着腾讯QQ 的发展，QQ在人们日常生活中的应用日益广泛，在信息交流、文 件共享、远程协作等方面起到了越来越重要的作用，QQ号码与手机号码、电话号 码一样成了日常生活中不可或缺的一部分。一些有组织的盗号集团在互联网上日 益猖獗，盗号现象屡见不鲜。由于QQ功能的集成性，QQ逐渐发展成为被网民所喜 欢并依赖的网络生活必需品。盗号事件的频繁发生给网民的网络生活带来了严重 的影响，严密的身份认证体系架构成为腾讯公司保障用户安全使用其产品的重要 技术。本文通过分析QQ帐号的安全需求论述QQ身份认证技术的重要性。讨论了目 前较为流行的身份认证技术，并重点描述了QQ 目前使用的用户名/密码身份认证技 术，分析了基于站点预留信息后验证的QQ身份认证体系架构，并重点分析了QQ 登陆口令加密算法以及QQ登陆的身份认证体系。 关键字：QQ、盗号、身份认证、MD5 I ABSTRACT ABSTRACT As long as the development of Tencent QQ, the increasing value of QQ account is knowing to all. Some organized group which focus on stealing QQ account is acting on the internet. For its integrational and interesting specialty, QQ is in increasingly popular nowadays and has become a necessity. So the stealing of QQ account is of a big threat to people on the internet, the techniques of identity authentication is being increasingly important to Tencent. This paper based on the emergency needs of the safety on QQ accounts and the coming of the importance on the techniques on QQ identity authentication. Through the discussing of the latest techniques on identity authentication, the paper focused on the username/password way of identity authentication which QQ used. Furthermore, this paper analyzed the whole QQ identity authentication system based on the remained information on the net. The last but not the least, this paper discussed the encrypt arithmetic through the logging in of QQ, and the identity authentication after the logging in. Keyword: QQ, stealing QQ account, identity authentication II 目录 目 录 第1 章 引言 1 1.1 课题背景 1 1.2 本