| 摘要 |
A method and a system for extending distributed logon services to an off-line computing device includes encrypting, on the off-line computing device, a one-time password (OTP), a nonce, and a unique identifier to generate an authorization request message. Using a mobile device as a proxy to forward the authorization request message to an access control server for authorization. Decrypting the authorization response message to obtain the nonce. Re-encrypting the nonce to generate an authorization response message. Using the mobile device as a proxy to forward the authorization response message to the off-line computing device. Decrypting the authorization response message to obtain the nonce. Comparing the nonce obtained from the authorization response message with the original nonce. The computing device to permit or deny access as result of comparing the nonce obtained from the authorization response message with the original nonce. |
