{"id":91042,"date":"2026-08-06T18:32:50","date_gmt":"2026-08-06T10:32:50","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/91042.html"},"modified":"2026-08-06T18:32:50","modified_gmt":"2026-08-06T10:32:50","slug":"otp-%e5%8a%a8%e6%80%81%e5%8f%a3%e4%bb%a4%e8%ae%a4%e8%af%81%e6%80%8e%e4%b9%88%e8%90%bd%e5%9c%b0%ef%bc%9f%e4%bb%8e-totp-%e5%8e%9f%e7%90%86%e5%88%b0%e4%ba%91%e6%a1%8c%e9%9d%a2%e3%80%81%e4%bc%81%e4%b8%9a","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/91042.html","title":{"rendered":"OTP \u52a8\u6001\u53e3\u4ee4\u8ba4\u8bc1\u600e\u4e48\u843d\u5730\uff1f\u4ece TOTP \u539f\u7406\u5230\u4e91\u684c\u9762\u3001\u4f01\u4e1a\u90ae\u7bb1\u4e09\u7c7b\u573a\u666f\u5b9e\u6218"},"content":{"rendered":"<p>\u5728\u6240\u6709\u591a\u56e0\u7d20\u8ba4\u8bc1&#xff08;MFA&#xff09;\u56e0\u5b50\u91cc&#xff0c;OTP \u52a8\u6001\u53e3\u4ee4\u662f\u843d\u5730\u6210\u672c\u6700\u4f4e\u7684\u4e00\u4e2a&#xff1a;\u4e0d\u7528\u53d1\u786c\u4ef6\u3001\u4e0d\u7528\u6539\u7ec8\u7aef\u3001\u5458\u5de5\u624b\u673a\u4e0a\u88c5\u4e2a\u5c0f\u7a0b\u5e8f\u5c31\u80fd\u7528\u3002<\/p>\n<p>\u4e5f\u6b63\u56e0\u4e3a\u95e8\u69db\u4f4e&#xff0c;\u5b83\u662f\u5927\u591a\u6570\u4f01\u4e1a\u8fc8\u5411\u53cc\u56e0\u7d20\u8ba4\u8bc1\u7684\u7b2c\u4e00\u6b65\u3002\u4f46\u771f\u6b63\u505a\u8fc7\u7684\u4eba\u77e5\u9053&#xff0c;OTP \u6709\u51e0\u4e2a\u5751\u4e0d\u8e29\u4e00\u6b21\u8bb0\u4e0d\u4f4f&#xff1a;\u65f6\u95f4\u6f02\u79fb\u3001\u4ee4\u724c\u4e22\u5931\u3001\u5171\u7528\u8d26\u53f7\u7ed1\u5b9a\u3001\u8001\u8bbe\u5907\u4e0d\u652f\u6301\u4e8c\u6b21\u8f93\u5165\u2026\u2026<\/p>\n<p>\u8fd9\u7bc7\u6587\u7ae0\u4ece TOTP \u7b97\u6cd5\u539f\u7406\u8bb2\u8d77&#xff0c;\u628a OTP \u5728\u4e91\u684c\u9762\/AD \u57df\u3001\u8fdc\u7a0b\u63a5\u5165\u3001\u4f01\u4e1a\u90ae\u7bb1\u4e09\u7c7b\u9ad8\u9891\u573a\u666f\u7684\u843d\u5730\u65b9\u5f0f\u8bb2\u900f&#xff0c;\u6700\u540e\u7ed9\u4e00\u4efd\u8fd0\u7ef4\u6392\u969c\u6e05\u5355\u3002<\/p>\n<hr \/>\n<h3>\u4e00\u3001TOTP \u5230\u5e95\u662f\u600e\u4e48\u7b97\u51fa\u90a3 6 \u4f4d\u6570\u7684<\/h3>\n<p>**OTP&#xff08;One-Time Password&#xff09;**\u662f\u4e00\u6b21\u6027\u52a8\u6001\u53e3\u4ee4&#xff0c;\u4e3b\u6d41\u5b9e\u73b0\u662f TOTP&#xff08;Time-based One-Time Password&#xff0c;RFC 6238&#xff09;&#xff0c;\u57fa\u4e8e\u65f6\u95f4\u540c\u6b65\u751f\u6210\u3002<\/p>\n<p>\u6838\u5fc3\u516c\u5f0f\u975e\u5e38\u7b80\u5355&#xff1a;<\/p>\n<p>T &#061; floor((\u5f53\u524dUnix\u65f6\u95f4 &#8211; T0) \/ X)        # T0 \u901a\u5e38\u4e3a 0&#xff0c;X \u4e3a\u65f6\u95f4\u6b65\u957f&#xff08;30\u79d2&#xff09;<br \/>\nOTP &#061; Truncate(HMAC-SHA1(\u79cd\u5b50\u5bc6\u94a5K, T)) mod 10^6<\/p>\n<p>\u62c6\u89e3\u4e00\u4e0b&#xff1a;<\/p>\n<li>\u79cd\u5b50\u5bc6\u94a5 K&#xff1a;\u6ce8\u518c\u4ee4\u724c\u65f6\u670d\u52a1\u7aef\u548c\u5ba2\u6237\u7aef\u5404\u5b58\u4e00\u4efd&#xff0c;\u4e4b\u540e\u518d\u4e5f\u4e0d\u5728\u7f51\u7edc\u4e0a\u4f20\u8f93<\/li>\n<li>\u65f6\u95f4\u8ba1\u6570\u5668 T&#xff1a;\u628a\u5f53\u524d\u65f6\u95f4\u6309 30 \u79d2\u5207\u7247&#xff0c;\u5f97\u5230\u4e00\u4e2a\u6574\u6570<\/li>\n<li>HMAC \u8fd0\u7b97&#xff1a;\u7528 K \u5bf9 T \u505a HMAC&#xff0c;\u5f97\u5230\u4e00\u4e32\u54c8\u5e0c<\/li>\n<li>\u52a8\u6001\u622a\u65ad&#xff1a;\u4ece\u54c8\u5e0c\u91cc\u6309\u89c4\u5219\u53d6 4 \u4e2a\u5b57\u8282&#xff0c;\u8f6c\u6210\u6570\u5b57&#xff0c;\u5bf9 10^6 \u53d6\u6a21\u5f97\u5230 6 \u4f4d\u6570<\/li>\n<p>\u5173\u952e\u7279\u6027&#xff1a;<\/p>\n<ul>\n<li>\u53e3\u4ee4\u4e0d\u5728\u7f51\u7edc\u4e0a\u4f20\u8f93\u79cd\u5b50&#xff0c;\u670d\u52a1\u7aef\u548c\u5ba2\u6237\u7aef\u5404\u81ea\u72ec\u7acb\u8ba1\u7b97&#xff0c;\u6bd4\u5bf9\u7ed3\u679c<\/li>\n<li>30 \u79d2\u53d8\u5316\u4e00\u6b21&#xff0c;\u5373\u4f7f\u88ab\u5077\u770b\u4e5f\u5f88\u5feb\u5931\u6548<\/li>\n<li>\u79bb\u7ebf\u53ef\u7528\u2014\u2014\u5ba2\u6237\u7aef\u4e0d\u9700\u8981\u8054\u7f51\u5c31\u80fd\u751f\u6210\u53e3\u4ee4&#xff08;\u8fd9\u70b9\u5728\u5f88\u591a\u573a\u666f\u81f3\u5173\u91cd\u8981&#xff09;<\/li>\n<\/ul>\n<p>\u5b89\u5f53\u7684 OTP \u5b9e\u73b0\u6709\u51e0\u4e2a\u6269\u5c55\u70b9&#xff1a;<\/p>\n<table>\n<tr>\u7279\u6027\u8bf4\u660e<\/tr>\n<tbody>\n<tr>\n<td>\u7b97\u6cd5\u652f\u6301<\/td>\n<td>OATH \u6807\u51c6 TOTP&#xff0c;\u540c\u65f6\u652f\u6301\u56fd\u5bc6 SM3 \u4f5c\u4e3a\u54c8\u5e0c\u7b97\u6cd5<\/td>\n<\/tr>\n<tr>\n<td>\u53e3\u4ee4\u89c4\u683c<\/td>\n<td>30 \u79d2\u53d8\u5316\u30016 \u4f4d\u6570\u5b57<\/td>\n<\/tr>\n<tr>\n<td>\u5ba2\u6237\u7aef<\/td>\n<td>\u5b89\u5f53\u4ee4\u724c\u5fae\u4fe1\u5c0f\u7a0b\u5e8f&#xff08;\u65e0\u9700\u88c5 App&#xff09;\u3001PC \u7aef\u7a0b\u5e8f&#xff08;Windows\/Linux\/Mac&#xff09;\u3001\u786c\u4ef6\u4ee4\u724c<\/td>\n<\/tr>\n<tr>\n<td>\u517c\u5bb9\u6027<\/td>\n<td>\u5b8c\u5168\u517c\u5bb9\u8c37\u6b4c\u3001\u5fae\u8f6f\u3001\u817e\u8baf\u7b49\u7b2c\u4e09\u65b9\u9a8c\u8bc1\u5668<\/td>\n<\/tr>\n<tr>\n<td>\u79cd\u5b50\u7ba1\u7406<\/td>\n<td>\u652f\u6301\u7cfb\u7edf\u751f\u6210\u79cd\u5b50\u548c\u81ea\u5b9a\u4e49\u79cd\u5b50\u5bfc\u5165<\/td>\n<\/tr>\n<tr>\n<td>\u670d\u52a1\u5f62\u6001<\/td>\n<td>OTP \u670d\u52a1\u7aef &#043; \u4ee4\u724c\u7ba1\u7406\u5de5\u5177 &#043; \u79fb\u52a8\u7aef &#043; \u786c\u4ef6\u4ee4\u724c<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u56fd\u5bc6 SM3 \u8fd9\u4e2a\u70b9\u503c\u5f97\u5355\u72ec\u8bf4&#xff1a;\u7b49\u4fdd\u548c\u5bc6\u8bc4\u573a\u666f\u4e0b&#xff0c;\u5982\u679c\u8981\u6c42&#034;\u5bc6\u7801\u7b97\u6cd5\u7b26\u5408\u56fd\u5bb6\u5bc6\u7801\u7ba1\u7406\u89c4\u5b9a&#034;&#xff0c;\u6807\u51c6 TOTP \u7528\u7684 HMAC-SHA1 \u53ef\u80fd\u4f1a\u88ab\u8d28\u7591\u3002\u6362\u6210 SM3 \u54c8\u5e0c\u540e&#xff0c;OTP \u8fd9\u4e00\u73af\u4e5f\u80fd\u7eb3\u5165\u56fd\u5bc6\u5408\u89c4\u4f53\u7cfb\u3002\u4ee3\u4ef7\u662f\u4e0d\u80fd\u518d\u7528\u8c37\u6b4c\u9a8c\u8bc1\u5668&#xff08;\u5b83\u4e0d\u8ba4 SM3&#xff09;&#xff0c;\u5fc5\u987b\u7528\u5b89\u5f53\u81ea\u5df1\u7684\u4ee4\u724c\u5ba2\u6237\u7aef\u3002<\/p>\n<p>\u5fae\u4fe1\u5c0f\u7a0b\u5e8f\u4ee4\u724c\u662f\u63a8\u5e7f\u5c42\u9762\u7684\u5173\u952e\u3002\u4f01\u4e1a\u63a8 MFA \u6700\u5927\u7684\u963b\u529b\u5f80\u5f80\u4e0d\u662f\u6280\u672f&#xff0c;\u662f&#034;\u8ba9\u5168\u5458\u88c5\u4e00\u4e2a\u65b0 App&#034;\u3002\u5c0f\u7a0b\u5e8f\u514d\u5b89\u88c5\u3001\u626b\u7801\u5373\u7528&#xff0c;\u63a8\u5e7f\u963b\u529b\u5c0f\u4e00\u4e2a\u6570\u91cf\u7ea7\u3002<\/p>\n<hr \/>\n<h3>\u4e8c\u3001\u573a\u666f\u4e00&#xff1a;\u4e91\u684c\u9762 \/ AD \u57df\u767b\u5f55\u52a0\u56fa&#xff08;\u6700\u5178\u578b&#xff09;<\/h3>\n<p>\u5ba2\u6237\u80cc\u666f&#xff1a;\u67d0\u7701\u7ea7\u7535\u7f51\u8c03\u5ea6\u4e2d\u5fc3&#xff0c;\u8fd0\u7ef4\u4eba\u5458\u901a\u8fc7 VMware Horizon \u4e91\u684c\u9762\u8bbf\u95ee\u7535\u529b\u4e1a\u52a1\u7cfb\u7edf\u3002\u4e91\u684c\u9762\u8d26\u53f7\u4e0e AD \u57df\u8d26\u53f7\u7ed1\u5b9a&#xff0c;\u4f46 AD \u57df\u53ea\u6709\u5bc6\u7801\u8ba4\u8bc1\u3002\u7535\u529b\u8c03\u5ea6\u7cfb\u7edf\u5c5e\u4e8e\u5173\u952e\u4fe1\u606f\u57fa\u7840\u8bbe\u65bd&#xff0c;\u5fc5\u987b\u6ee1\u8db3\u7535\u7f51\u5b89\u5168\u9632\u62a4\u8981\u6c42\u3002<\/p>\n<p>\u95ee\u9898\u672c\u8d28&#xff1a;\u4e91\u684c\u9762\u672c\u8eab\u6ca1\u6709\u8ba4\u8bc1\u80fd\u529b&#xff0c;\u5b83\u628a\u8ba4\u8bc1\u59d4\u6258\u7ed9\u4e86 AD \u57df&#xff1b;\u800c AD \u57df\u539f\u751f\u53ea\u652f\u6301\u5bc6\u7801\u3002\u6240\u4ee5\u52a0\u56fa\u70b9\u4e0d\u5728\u4e91\u684c\u9762&#xff0c;\u5728 AD \u57df\u3002<\/p>\n<p>\u65b9\u6848&#xff1a;\u5728 AD \u57df\u63a7\u670d\u52a1\u5668\u4e0a\u96c6\u6210 ASP \u7684 OTP \u8ba4\u8bc1\u63d2\u4ef6&#xff0c;\u5b9e\u73b0&#034;\u5bc6\u7801 &#043; \u52a8\u6001\u53e3\u4ee4&#034;\u53cc\u56e0\u7d20\u3002<\/p>\n<p>\u8fd0\u7ef4\u4eba\u5458 \u2192 \u4e91\u684c\u9762\u767b\u5f55\u6846&#xff08;\u8f93\u5165\u57df\u8d26\u53f7&#043;\u5bc6\u7801&#xff09;<br \/>\n              \u2193<br \/>\n          AD \u57df\u63a7&#xff08;\u5df2\u96c6\u6210 ASP OTP \u63d2\u4ef6&#xff09;<br \/>\n              \u2193 \u5bc6\u7801\u6821\u9a8c\u901a\u8fc7\u540e&#xff0c;\u89e6\u53d1\u7b2c\u4e8c\u56e0\u5b50<br \/>\n          \u5f39\u51fa\u52a8\u6001\u53e3\u4ee4\u8f93\u5165\u6846<br \/>\n              \u2193<br \/>\n          \u7528\u6237\u6253\u5f00\u5fae\u4fe1\u5c0f\u7a0b\u5e8f\u8bfb\u53d6 6 \u4f4d\u53e3\u4ee4<br \/>\n              \u2193<br \/>\n          ASP OTP \u670d\u52a1\u7aef\u6821\u9a8c \u2192 \u901a\u8fc7 \u2192 \u8fdb\u5165\u4e91\u684c\u9762<br \/>\n              \u2193<br \/>\n          \u767b\u5f55\u65e5\u5fd7\u540c\u6b65\u81f3\u7edf\u4e00\u65e5\u5fd7\u5e73\u53f0<\/p>\n<p>\u4e3a\u4ec0\u4e48\u9009\u63d2\u4ef6\u65b9\u5f0f\u800c\u4e0d\u662f RADIUS&#xff1a;VMware Horizon \u867d\u7136\u652f\u6301 RADIUS&#xff0c;\u4f46\u6539\u6210 RADIUS \u540e\u539f\u6765\u7684\u57df\u8d26\u53f7\u65e0\u7f1d\u4f53\u9a8c\u4f1a\u53d7\u5f71\u54cd&#xff08;\u7528\u6237\u8981\u91cd\u65b0\u9002\u5e94\u767b\u5f55\u6d41\u7a0b&#xff09;\u3002\u5728\u57df\u63a7\u4e0a\u88c5\u63d2\u4ef6&#xff0c;\u7528\u6237\u754c\u9762\u57fa\u672c\u4e0d\u53d8&#xff0c;\u53ea\u662f\u591a\u4e86\u4e00\u6b65\u8f93\u5165\u53e3\u4ee4&#xff0c;\u8fd0\u7ef4\u4eba\u5458\u51e0\u4e4e\u65e0\u611f\u3002<\/p>\n<p>\u843d\u5730\u6548\u679c&#xff1a;<\/p>\n<ul>\n<li>\u4e91\u684c\u9762\u767b\u5f55\u4ece\u5bc6\u7801\u5355\u56e0\u7d20\u63d0\u5347\u5230\u53cc\u56e0\u7d20&#xff0c;\u6ee1\u8db3\u7535\u7f51\u9632\u62a4\u8981\u6c42<\/li>\n<li>\u6bcf\u6b21\u8c03\u5ea6\u7cfb\u7edf\u8bbf\u95ee\u7cbe\u786e\u8ffd\u6eaf\u5230\u4eba<\/li>\n<li>\u63d2\u4ef6\u4e0e AD \u57df\u65e0\u7f1d\u96c6\u6210&#xff0c;\u8fd0\u7ef4\u4eba\u5458\u65e0\u611f\u77e5&#xff0c;\u4f53\u9a8c\u826f\u597d<\/li>\n<\/ul>\n<p>\u540c\u7c7b\u573a\u666f&#xff1a;\u9510\u6377\/\u534e\u4e3a\u4e91\u684c\u9762\u3001\u8bbe\u8ba1\u90e8\u95e8\u7684\u56fe\u5f62\u5de5\u4f5c\u7ad9\u3001\u8c03\u5ea6\u4e2d\u5fc3\u7ec8\u7aef&#xff0c;\u601d\u8def\u5b8c\u5168\u4e00\u81f4\u2014\u2014\u627e\u5230\u771f\u6b63\u505a\u8ba4\u8bc1\u7684\u90a3\u4e00\u5c42&#xff08;\u901a\u5e38\u662f AD&#xff09;&#xff0c;\u5728\u90a3\u91cc\u52a0\u56e0\u5b50\u3002<\/p>\n<hr \/>\n<h3>\u4e09\u3001\u573a\u666f\u4e8c&#xff1a;\u8fdc\u7a0b\u63a5\u5165\u7684 OTP \u4e8c\u6b21\u9a8c\u8bc1<\/h3>\n<p>\u573a\u666f\u901a\u8fc7 RADIUS \u534f\u8bae &#043; OTP \u6311\u6218\u54cd\u5e94\u5b9e\u73b0&#xff0c;\u8fd9\u662f\u6700\u6807\u51c6\u7684\u7ec4\u5408\u3002<\/p>\n<p>\u6d41\u7a0b\u8981\u70b9&#xff08;\u8be6\u7ec6\u62a5\u6587\u4ea4\u4e92\u89c1 RADIUS \u4e13\u9898&#xff09;&#xff1a;<\/p>\n<p>\u7528\u6237\u8f93\u5bc6\u7801 \u2192 VPN\u7f51\u5173\u53d1 Access-Request \u2192 ASP \u6821\u9a8c\u5bc6\u7801<br \/>\n   \u2192 ASP \u56de Access-Challenge&#xff08;&#034;\u8bf7\u8f93\u5165\u52a8\u6001\u53e3\u4ee4&#034;&#xff09;<br \/>\n   \u2192 \u7528\u6237\u8f93 OTP \u2192 \u4e8c\u6b21 Access-Request&#xff08;\u5e26 State&#xff09;<br \/>\n   \u2192 ASP \u6821\u9a8c OTP \u2192 Access-Accept \u2192 \u653e\u884c<\/p>\n<p>\u5b9e\u65bd\u4e2d\u6700\u5bb9\u6613\u51fa\u95ee\u9898\u7684\u4e24\u70b9&#xff1a;<\/p>\n<p>1. \u8d85\u65f6\u53c2\u6570\u3002 \u7528\u6237\u4ece\u770b\u5230\u63d0\u793a\u3001\u638f\u624b\u673a\u3001\u6253\u5f00\u5c0f\u7a0b\u5e8f\u3001\u8bfb\u6570\u5b57\u3001\u8f93\u5165&#xff0c;\u5b9e\u9645\u9700\u8981 10-20 \u79d2\u3002\u7f51\u5173\u7684 RADIUS timeout \u5982\u679c\u8fd8\u662f\u9ed8\u8ba4 3 \u79d2&#xff0c;\u8ba4\u8bc1\u5fc5\u7136\u5931\u8d25\u3002\u5efa\u8bae timeout \u2265 5 \u79d2\u3001retransmit 2 \u6b21&#xff0c;\u5e76\u786e\u8ba4\u8bbe\u5907\u4fa7\u7684\u6574\u4f53\u4f1a\u8bdd\u8d85\u65f6\u8db3\u591f\u957f\u3002<\/p>\n<p>2. \u8001\u5ba2\u6237\u7aef\u4e0d\u652f\u6301\u4e8c\u6b21\u5f39\u6846\u3002 \u90e8\u5206\u8001\u5ba2\u6237\u7aef\u4e0d\u5b9e\u73b0 Access-Challenge&#xff0c;\u8fd9\u65f6\u6539\u7528\u5bc6\u7801\u62fc\u63a5\u6a21\u5f0f&#xff1a;\u7528\u6237\u5728\u5bc6\u7801\u6846\u8f93\u5165 \u5bc6\u7801&#043;6\u4f4dOTP&#xff08;\u5982 MyPass2026 &#043; 418302 &#061; MyPass2026418302&#xff09;&#xff0c;\u670d\u52a1\u7aef\u4ece\u5c3e\u90e8\u622a\u53d6 6 \u4f4d\u505a OTP \u6821\u9a8c&#xff0c;\u524d\u9762\u90e8\u5206\u505a\u5bc6\u7801\u6821\u9a8c\u3002<\/p>\n<p>\u62fc\u63a5\u6a21\u5f0f\u4f53\u9a8c\u7565\u5dee&#xff0c;\u4f46\u517c\u5bb9\u6027\u6700\u597d&#xff0c;\u8001\u8bbe\u5907\u73af\u5883\u503c\u5f97\u4f18\u5148\u8003\u8651\u3002<\/p>\n<p>\u67d0\u8de8\u56fd\u5236\u9020\u4e1a\u5916\u4f01\u7684\u843d\u5730\u6570\u636e&#xff1a;\u4ece\u5355\u56e0\u7d20\u5347\u7ea7\u4e3a\u53cc\u56e0\u7d20&#xff0c;\u8d26\u53f7\u5bc6\u7801\u6cc4\u9732\u4e5f\u65e0\u6cd5\u5355\u72ec\u767b\u5f55&#xff1b;\u6bcf\u6b21\u8bbf\u95ee\u7ed1\u5b9a\u771f\u5b9e\u8eab\u4efd&#xff0c;\u6ee1\u8db3\u603b\u90e8\u5408\u89c4\u5ba1\u8ba1&#xff1b;\u5458\u5de5\u65e0\u989d\u5916\u786c\u4ef6\u6210\u672c&#xff0c;\u4f53\u9a8c\u4e0e\u6b64\u524d\u57fa\u672c\u4e00\u81f4&#xff1b;\u6574\u4f53\u90e8\u7f72\u5468\u671f\u4e0d\u5230 3 \u5929\u3002<\/p>\n<hr \/>\n<h3>\u56db\u3001\u573a\u666f\u4e09&#xff1a;\u4f01\u4e1a\u90ae\u7bb1\u9632\u9493\u9c7c<\/h3>\n<p>\u95ee\u9898\u80cc\u666f&#xff1a;\u516c\u53f8\u90ae\u7bb1\u9493\u9c7c\u90ae\u4ef6\u9891\u53d1&#xff0c;\u4e00\u65e6\u67d0\u4e2a\u8d26\u53f7\u88ab\u76d7&#xff0c;\u653b\u51fb\u8005\u4f1a\u7528\u8fd9\u4e2a\u771f\u5b9e\u8d26\u53f7\u7ee7\u7eed\u5411\u5185\u90e8\u7fa4\u53d1\u9493\u9c7c\u90ae\u4ef6\u2014\u2014\u56e0\u4e3a\u53d1\u4ef6\u4eba\u662f&#034;\u81ea\u5df1\u4eba&#034;&#xff0c;\u6210\u529f\u7387\u6781\u9ad8\u3002\u9ad8\u7ba1\u90ae\u7bb1\u88ab\u76d7\u8fd8\u53ef\u80fd\u6cc4\u9732\u673a\u5bc6\u5546\u52a1\u90ae\u4ef6\u3002<\/p>\n<p>\u4e3a\u4ec0\u4e48\u90ae\u7bb1\u7279\u522b\u503c\u5f97\u4e0a MFA&#xff1a;\u90ae\u7bb1\u662f\u5bc6\u7801\u91cd\u7f6e\u7684\u7ec8\u70b9\u3002\u653b\u7834\u90ae\u7bb1 &#061; \u53ef\u4ee5\u91cd\u7f6e\u4e00\u5927\u534a\u7cfb\u7edf\u7684\u5bc6\u7801\u3002\u5b83\u662f\u8eab\u4efd\u4f53\u7cfb\u91cc\u7684&#034;\u603b\u94a5\u5319&#034;&#xff0c;\u5374\u5f80\u5f80\u662f\u9632\u62a4\u6700\u5f31\u7684\u4e00\u73af\u3002<\/p>\n<p>\u65b9\u6848&#xff1a;ASP MFA \u6a21\u5757\u5bf9\u90ae\u7bb1\u767b\u5f55\u542f\u7528\u4e8c\u6b21\u9a8c\u8bc1&#xff0c;\u53ef\u9009\u56e0\u5b50\u5305\u62ec OTP \u52a8\u6001\u53e3\u4ee4\u3001\u77ed\u4fe1\u9a8c\u8bc1\u7801\u3001\u90ae\u4ef6\u9a8c\u8bc1\u7801\u3002<\/p>\n<p>Exchange \/ \u4f01\u4e1a\u90ae\u7bb1\u7684\u63a5\u5165\u65b9\u5f0f&#xff1a;<\/p>\n<ul>\n<li>Web \u7aef&#xff08;OWA&#xff09;&#xff1a;\u8d70 SAML\/OIDC SSO&#xff0c;\u8ba4\u8bc1\u5728 ASP \u4fa7\u5b8c\u6210&#xff0c;\u5929\u7136\u5e26 MFA<\/li>\n<li>\u5ba2\u6237\u7aef&#xff08;Outlook\/Foxmail&#xff09;&#xff1a;\u8d70 IMAP\/SMTP \u7684\u4f20\u7edf\u8ba4\u8bc1\u4e0d\u652f\u6301\u4ea4\u4e92\u5f0f\u4e8c\u6b21\u9a8c\u8bc1&#xff0c;\u9700\u8981\u7528\u5e94\u7528\u4e13\u7528\u5bc6\u7801\u673a\u5236&#xff0c;\u6216\u8005\u5347\u7ea7\u5230\u652f\u6301 Modern Auth&#xff08;OAuth 2.0&#xff09;\u7684\u5ba2\u6237\u7aef<\/li>\n<li>\u79fb\u52a8\u7aef&#xff1a;\u4f18\u5148\u8d70 Modern Auth<\/li>\n<\/ul>\n<p>\u8fd9\u91cc\u6709\u4e2a\u5fc5\u987b\u63d0\u9192\u7684\u5751&#xff1a;\u53ea\u7ed9 Web \u7aef\u52a0\u4e86 MFA&#xff0c;\u5374\u5fd8\u4e86 IMAP\/POP3 \u8fd9\u4e9b\u8001\u534f\u8bae\u8fd8\u5f00\u7740\u2014\u2014\u653b\u51fb\u8005\u76f4\u63a5\u7528 IMAP \u62ff\u5bc6\u7801\u767b\u5f55&#xff0c;MFA \u5b8c\u5168\u88ab\u7ed5\u8fc7\u3002\u505a\u90ae\u7bb1 MFA \u7684\u7b2c\u4e00\u4ef6\u4e8b&#xff0c;\u662f\u5173\u6389\u6216\u4e25\u683c\u9650\u5236\u4e0d\u652f\u6301 MFA \u7684\u8001\u534f\u8bae\u5165\u53e3\u3002<\/p>\n<hr \/>\n<h3>\u4e94\u3001OTP \u843d\u5730\u7684\u4e94\u4e2a\u771f\u5b9e\u5751<\/h3>\n<h4>\u5751\u4e00&#xff1a;\u65f6\u95f4\u6f02\u79fb\u5bfc\u81f4\u53e3\u4ee4\u4e00\u76f4\u9519<\/h4>\n<p>TOTP \u4f9d\u8d56\u65f6\u95f4\u540c\u6b65\u3002\u670d\u52a1\u7aef\u65f6\u95f4\u4e0d\u51c6\u3001\u6216\u8005\u7528\u6237\u624b\u673a\u65f6\u95f4\u88ab\u624b\u52a8\u6539\u8fc7&#xff0c;\u90fd\u4f1a\u5bfc\u81f4\u53e3\u4ee4\u6821\u9a8c\u5931\u8d25\u3002<\/p>\n<p>\u5bf9\u7b56&#xff1a;<\/p>\n<ul>\n<li>\u670d\u52a1\u7aef\u5f3a\u5236 NTP \u540c\u6b65&#xff0c;\u76d1\u63a7\u65f6\u95f4\u504f\u5dee<\/li>\n<li>\u670d\u52a1\u7aef\u914d\u7f6e\u5bb9\u5dee\u7a97\u53e3&#xff08;\u4e00\u822c\u5141\u8bb8\u524d\u540e 1 \u4e2a\u65f6\u95f4\u6b65\u957f&#xff0c;\u5373 \u00b130 \u79d2&#xff09;<\/li>\n<li>\u5ba2\u6237\u7aef\u63d0\u793a\u7528\u6237\u5f00\u542f&#034;\u81ea\u52a8\u8bbe\u7f6e\u65f6\u95f4&#034;<\/li>\n<\/ul>\n<p>\u6392\u67e5\u65b9\u6cd5\u5f88\u7b80\u5355&#xff1a;\u8ba9\u7528\u6237\u62a5\u4e00\u6b21\u5f53\u524d\u53e3\u4ee4\u548c\u624b\u673a\u65f6\u95f4&#xff0c;\u670d\u52a1\u7aef\u5bf9\u540c\u4e00\u65f6\u523b\u7b97\u4e00\u904d&#xff0c;\u6bd4\u5bf9\u504f\u4e86\u51e0\u4e2a\u7a97\u53e3\u3002<\/p>\n<h4>\u5751\u4e8c&#xff1a;\u5458\u5de5\u6362\u624b\u673a&#xff0c;\u4ee4\u724c\u5168\u4e22<\/h4>\n<p>\u8fd9\u662f\u4e0a\u7ebf\u540e\u8fd0\u7ef4\u5de5\u5355\u7684\u6700\u5927\u6765\u6e90\u3002<\/p>\n<p>\u5bf9\u7b56&#xff1a;<\/p>\n<ul>\n<li>\u4e00\u4e2a\u8d26\u53f7\u652f\u6301\u7ed1\u5b9a\u591a\u4e2a\u4ee4\u724c&#xff08;\u6bd4\u5982\u540c\u65f6\u7ed1\u624b\u673a\u5c0f\u7a0b\u5e8f\u548c PC \u7aef&#xff09;&#xff0c;\u6362\u624b\u673a\u4e0d\u5f71\u54cd<\/li>\n<li>\u63d0\u4f9b\u81ea\u52a9\u89e3\u7ed1\/\u91cd\u65b0\u7ed1\u5b9a\u6d41\u7a0b&#xff08;\u9700\u8981\u7ecf\u8fc7\u8eab\u4efd\u6838\u9a8c&#xff09;<\/li>\n<li>\u7ba1\u7406\u5458\u540e\u53f0\u53ef\u91cd\u7f6e\u4ee4\u724c\u3001\u53ef\u7528\u5907\u7528\u6062\u590d\u7801<\/li>\n<li>ASP \u652f\u6301\u7528\u6237\u81ea\u52a9\u7ed1\u5b9a\u3001\u89e3\u7ed1\u3001\u5207\u6362\u8ba4\u8bc1\u8bbe\u5907&#xff0c;\u5927\u5e45\u51cf\u5c11\u7ba1\u7406\u5458\u5de5\u5355<\/li>\n<\/ul>\n<h4>\u5751\u4e09&#xff1a;\u5171\u4eab\u8d26\u53f7\u600e\u4e48\u7ed1 OTP<\/h4>\n<p>\u591a\u4eba\u5171\u7528\u4e00\u4e2a\u8d26\u53f7&#xff08;\u8f66\u95f4\u73ed\u7ec4\u8d26\u53f7\u3001\u7535\u5546\u540e\u53f0\u4e3b\u8d26\u53f7&#xff09;&#xff0c;OTP \u7ed1\u7ed9\u8c01&#xff1f;<\/p>\n<p>\u4e09\u6761\u8def&#xff1a;<\/p>\n<ul>\n<li>\u80fd\u62c6\u8d26\u53f7\u5c31\u62c6&#xff08;\u6700\u4f18\u89e3&#xff0c;\u4e00\u4eba\u4e00\u8d26\u53f7&#xff09;<\/li>\n<li>\u62c6\u4e0d\u4e86\u7684\u7528 SYP \u5bc6\u7801\u7ba1\u7406\u5668\u6258\u7ba1&#xff1a;\u8d26\u53f7\u5bc6\u7801\u96c6\u4e2d\u4fdd\u7ba1&#xff0c;\u6388\u6743\u5230\u4eba\u3001\u6388\u6743\u5230\u65f6\u95f4\u6bb5&#xff0c;\u6bcf\u6b21\u4f7f\u7528\u7ed1\u5b9a\u771f\u5b9e\u64cd\u4f5c\u4eba<\/li>\n<li>\u7ec8\u7aef\u573a\u666f\u7528 SLA \u4e00\u8d26\u53f7\u591a\u56e0\u5b50&#xff1a;\u540c\u4e00\u8d26\u53f7\u4e0b\u7ed1\u5b9a\u591a\u4eba\u6307\u7eb9\/UKey&#xff0c;\u65e5\u5fd7\u8bb0\u5f55\u5230\u5177\u4f53\u56e0\u5b50&#xff0c;\u4ece\u800c\u8ffd\u6eaf\u5230\u4eba<\/li>\n<\/ul>\n<h4>\u5751\u56db&#xff1a;\u79bb\u804c\u5458\u5de5\u7684\u4ee4\u724c\u6ca1\u56de\u6536<\/h4>\n<p>\u5bf9\u7b56&#xff1a;\u628a\u4ee4\u724c\u7981\u7528\u6302\u5230\u8eab\u4efd\u751f\u547d\u5468\u671f\u4e0a\u2014\u2014ASP \u91cc\u7981\u7528\u8eab\u4efd\u65f6&#xff0c;\u8be5\u7528\u6237\u7684\u6240\u6709\u4ee4\u724c\u4e00\u5e76\u5931\u6548&#xff0c;\u4e0d\u7528\u5355\u72ec\u64cd\u4f5c\u3002\u5982\u679c HR \u7cfb\u7edf\u5df2\u5bf9\u63a5&#xff0c;\u79bb\u804c\u6d41\u7a0b\u81ea\u52a8\u89e6\u53d1\u3002<\/p>\n<h4>\u5751\u4e94&#xff1a;\u5168\u5458\u4e00\u5200\u5207\u5f3a\u5236 MFA&#xff0c;\u4e1a\u52a1\u53cd\u5f39<\/h4>\n<p>\u5bf9\u7b56&#xff1a;\u6309\u573a\u666f\u5206\u7ea7&#xff0c;\u522b\u4e00\u5200\u5207\u3002<\/p>\n<table>\n<tr>\u573a\u666f\u5efa\u8bae\u5f3a\u5ea6<\/tr>\n<tbody>\n<tr>\n<td>\u5185\u7f51\u529e\u516c\u8bbf\u95ee OA\/\u8003\u52e4<\/td>\n<td>\u5bc6\u7801\u5373\u53ef<\/td>\n<\/tr>\n<tr>\n<td>\u8bbf\u95ee\u5ba2\u6237\u6570\u636e\u3001\u8d22\u52a1\u3001\u4eba\u4e8b\u7cfb\u7edf<\/td>\n<td>\u5bc6\u7801 &#043; OTP<\/td>\n<\/tr>\n<tr>\n<td>\u4e92\u8054\u7f51\u4fa7\u8fdc\u7a0b\u63a5\u5165<\/td>\n<td>\u5bc6\u7801 &#043; OTP&#xff08;\u5f3a\u5236&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u7ba1\u7406\u5458\u540e\u53f0\u3001\u5821\u5792\u673a\u3001\u670d\u52a1\u5668\u767b\u5f55<\/td>\n<td>\u5bc6\u7801 &#043; UKey\/FIDO2&#xff08;\u6bd4 OTP \u66f4\u5f3a&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u90ae\u7bb1<\/td>\n<td>\u5bc6\u7801 &#043; OTP&#xff08;\u5f3a\u5236&#xff09;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>ASP \u652f\u6301\u4f9d\u636e\u8bbf\u95ee\u6765\u6e90\u3001\u8bbe\u5907\u72b6\u6001\u3001\u65f6\u95f4\u6bb5\u52a8\u6001\u8c03\u6574\u8ba4\u8bc1\u5f3a\u5ea6\u2014\u2014\u5185\u7f51\u529e\u516c\u4e0d\u6253\u6270&#xff0c;\u5916\u7f51\u8bbf\u95ee\u5f3a\u6821\u9a8c&#xff0c;\u8fd9\u662f\u963b\u529b\u6700\u5c0f\u7684\u63a8\u8fdb\u65b9\u5f0f\u3002<\/p>\n<hr \/>\n<h3>\u516d\u3001OTP \u548c\u5176\u4ed6 MFA \u56e0\u5b50\u600e\u4e48\u642d\u914d<\/h3>\n<p>OTP \u4e0d\u662f\u4e07\u80fd\u7684&#xff0c;\u5b83\u7684\u5b9a\u4f4d\u662f&#034;\u6027\u4ef7\u6bd4\u6700\u9ad8\u7684\u7b2c\u4e8c\u56e0\u5b50&#034;\u3002\u5b8c\u6574\u7684\u56e0\u5b50\u77e9\u9635&#xff1a;<\/p>\n<table>\n<tr>\u56e0\u5b50\u5b89\u5168\u6027\u6210\u672c\u4fbf\u5229\u6027\u9002\u7528\u573a\u666f<\/tr>\n<tbody>\n<tr>\n<td>OTP \u52a8\u6001\u53e3\u4ee4<\/td>\n<td>\u4e2d\u9ad8<\/td>\n<td>\u6781\u4f4e&#xff08;\u8f6f\u4ee4\u724c\u514d\u8d39&#xff09;<\/td>\n<td>\u4e2d&#xff08;\u8981\u638f\u624b\u673a&#xff09;<\/td>\n<td>VPN\u3001\u90ae\u7bb1\u3001\u4e1a\u52a1\u7cfb\u7edf\u3001\u4e91\u684c\u9762<\/td>\n<\/tr>\n<tr>\n<td>\u77ed\u4fe1\/\u90ae\u4ef6\u9a8c\u8bc1\u7801<\/td>\n<td>\u4e2d\u4f4e&#xff08;\u53ef\u88ab SIM \u52ab\u6301&#xff09;<\/td>\n<td>\u4f4e&#xff08;\u6709\u77ed\u4fe1\u8d39&#xff09;<\/td>\n<td>\u9ad8<\/td>\n<td>\u515c\u5e95\u3001\u627e\u56de\u3001\u4f4e\u654f\u611f\u573a\u666f<\/td>\n<\/tr>\n<tr>\n<td>UKey&#xff08;\u56fd\u5bc6 SM2&#xff09;<\/td>\n<td>\u9ad8<\/td>\n<td>\u4e2d&#xff08;\u786c\u4ef6\u6210\u672c&#xff09;<\/td>\n<td>\u4e2d&#xff08;\u8981\u63d2 Key&#xff09;<\/td>\n<td>\u670d\u52a1\u5668\u767b\u5f55\u3001\u7ba1\u7406\u5458\u3001\u79bb\u7ebf\u73af\u5883<\/td>\n<\/tr>\n<tr>\n<td>\u6307\u7eb9&#xff08;USB \u6307\u7eb9\u4eea&#xff09;<\/td>\n<td>\u9ad8<\/td>\n<td>\u4e2d<\/td>\n<td>\u9ad8&#xff08;\u78b0\u4e00\u4e0b&#xff09;<\/td>\n<td>\u8f66\u95f4\u7ec8\u7aef\u3001\u56fa\u5b9a\u5de5\u4f4d<\/td>\n<\/tr>\n<tr>\n<td>FIDO2 \/ WebAuthn<\/td>\n<td>\u6700\u9ad8&#xff08;\u6297\u9493\u9c7c&#xff09;<\/td>\n<td>\u4e2d<\/td>\n<td>\u9ad8<\/td>\n<td>\u9ad8\u5b89\u5168 Web \u573a\u666f\u3001\u65e0\u5bc6\u7801\u767b\u5f55<\/td>\n<\/tr>\n<tr>\n<td>\u6570\u5b57\u8bc1\u4e66<\/td>\n<td>\u9ad8<\/td>\n<td>\u4e2d<\/td>\n<td>\u4e2d<\/td>\n<td>\u653f\u52a1\u3001\u91d1\u878d\u3001B2B \u63a5\u53e3<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>ASP \u7684 MFA \u6a21\u5757\u628a\u8fd9\u4e9b\u56e0\u5b50\u90fd\u7eb3\u5165\u7edf\u4e00\u7ba1\u7406&#xff1a;FIDO2\/WebAuthn&#xff08;\u6307\u7eb9\u3001\u4eba\u8138\u3001\u786c\u4ef6\u5bc6\u94a5&#xff09;\u3001UKey&#xff08;KeyId\/\u516c\u94a5\/\u8bc1\u4e66\u4e09\u79cd\u7ed1\u5b9a\u65b9\u5f0f&#xff09;\u3001OTP\u3001\u5b89\u5168\u8f6f\u9501 ID\u3001\u77ed\u4fe1\/\u90ae\u4ef6\u9a8c\u8bc1\u7801&#xff0c;\u7ba1\u7406\u5458\u6309\u9700\u5f00\u542f&#xff0c;\u7528\u6237\u81ea\u52a9\u7ed1\u5b9a\u3002<\/p>\n<p>\u6297\u9493\u9c7c\u8fd9\u4e2a\u7ef4\u5ea6\u503c\u5f97\u7279\u522b\u6ce8\u610f&#xff1a;OTP \u662f\u53ef\u4ee5\u88ab\u9493\u9c7c\u7684\u2014\u2014\u653b\u51fb\u8005\u505a\u4e2a\u5047\u767b\u5f55\u9875&#xff0c;\u5b9e\u65f6\u628a\u7528\u6237\u8f93\u5165\u7684\u5bc6\u7801\u548c OTP \u8f6c\u53d1\u5230\u771f\u7ad9\u70b9\u5373\u53ef\u3002FIDO2 \u56e0\u4e3a\u7ed1\u5b9a\u4e86\u57df\u540d&#xff08;origin binding&#xff09;&#xff0c;\u5929\u7136\u6297\u8fd9\u7c7b\u653b\u51fb\u3002\u6240\u4ee5\u6700\u9ad8\u654f\u611f\u7684\u573a\u666f\u5e94\u8be5\u4e0a FIDO2&#xff0c;\u800c\u4e0d\u662f OTP\u3002<\/p>\n<hr \/>\n<h3>\u4e03\u3001\u5e38\u89c1\u95ee\u9898<\/h3>\n<p>Q&#xff1a;OTP \u548c\u77ed\u4fe1\u9a8c\u8bc1\u7801\u54ea\u4e2a\u66f4\u5b89\u5168&#xff1f;<\/p>\n<p>OTP \u66f4\u5b89\u5168\u3002\u77ed\u4fe1\u53ef\u80fd\u88ab SIM \u5361\u52ab\u6301\u3001\u4f2a\u57fa\u7ad9\u622a\u83b7&#xff0c;\u4e14\u4f9d\u8d56\u8fd0\u8425\u5546\u94fe\u8def&#xff1b;OTP \u79cd\u5b50\u53ea\u5728\u6ce8\u518c\u65f6\u4ea4\u6362&#xff0c;\u4e4b\u540e\u5b8c\u5168\u79bb\u7ebf\u8ba1\u7b97\u3002\u77ed\u4fe1\u66f4\u9002\u5408\u505a\u515c\u5e95\u548c\u8d26\u53f7\u627e\u56de\u3002<\/p>\n<p>Q&#xff1a;\u65ad\u7f51\u73af\u5883\u80fd\u7528 OTP \u5417&#xff1f;<\/p>\n<p>\u5ba2\u6237\u7aef\u4fa7\u53ef\u4ee5\u2014\u2014TOTP \u751f\u6210\u4e0d\u9700\u8981\u7f51\u7edc\u3002\u4f46\u670d\u52a1\u7aef\u6821\u9a8c\u9700\u8981\u80fd\u8bbf\u95ee\u5230 OTP \u670d\u52a1\u3002\u5b8c\u5168\u79bb\u7ebf\u7684\u7ec8\u7aef\u573a\u666f&#xff08;\u5982\u5916\u573a\u670d\u52a1\u5668&#xff09;&#xff0c;ASP \u7684\u505a\u6cd5\u662f\u7528 SLA \u79bb\u7ebf\u4ee4\u724c&#xff1a;\u7ba1\u7406\u5458\u96c6\u4e2d\u6258\u7ba1\u548c\u8f6e\u6362\u7ec8\u7aef\u7684\u79bb\u7ebf OTP&#xff0c;\u7ec8\u7aef\u672c\u5730\u5b8c\u6210\u6821\u9a8c\u3002<\/p>\n<p>Q&#xff1a;\u4e00\u4e2a\u7528\u6237\u80fd\u7ed1\u51e0\u4e2a\u4ee4\u724c&#xff1f;<\/p>\n<p>\u652f\u6301\u7ed1\u5b9a\u591a\u4e2a\u3002\u63a8\u8350\u81f3\u5c11\u7ed1\u4e24\u4e2a&#xff08;\u624b\u673a\u5c0f\u7a0b\u5e8f &#043; PC \u7aef\u6216\u786c\u4ef6\u4ee4\u724c&#xff09;&#xff0c;\u4e92\u4e3a\u5907\u4efd\u3002<\/p>\n<p>Q&#xff1a;\u80fd\u517c\u5bb9\u8c37\u6b4c\u9a8c\u8bc1\u5668\u5417&#xff1f;<\/p>\n<p>\u6807\u51c6 TOTP \u6a21\u5f0f\u5b8c\u5168\u517c\u5bb9\u8c37\u6b4c\u3001\u5fae\u8f6f\u3001\u817e\u8baf\u7b49\u7b2c\u4e09\u65b9\u9a8c\u8bc1\u5668\u3002\u4f46\u5982\u679c\u542f\u7528\u56fd\u5bc6 SM3 \u7b97\u6cd5&#xff0c;\u5c31\u5fc5\u987b\u7528\u5b89\u5f53\u4ee4\u724c\u5ba2\u6237\u7aef\u2014\u2014\u7b2c\u4e09\u65b9\u9a8c\u8bc1\u5668\u4e0d\u652f\u6301 SM3\u3002<\/p>\n<p>Q&#xff1a;OTP \u670d\u52a1\u7684\u6027\u80fd\u591f\u5417&#xff1f;<\/p>\n<p>ASP \u5e73\u53f0\u6574\u4f53\u6307\u6807&#xff1a;2000 QPS \u5e76\u53d1\u3001\u5e73\u5747\u8ba4\u8bc1\u5ef6\u8fdf &lt; 50ms\u3001\u6700\u5927\u6ce8\u518c\u7528\u6237 100 \u4e07&#043;\u3002OTP \u6821\u9a8c\u672c\u8eab\u662f\u7eaf\u8ba1\u7b97\u64cd\u4f5c&#xff0c;\u4e0d\u662f\u74f6\u9888&#xff1b;\u74f6\u9888\u901a\u5e38\u5728\u6570\u636e\u5e93\u67e5\u8be2\u548c\u4f1a\u8bdd\u7ba1\u7406&#xff0c;\u6240\u4ee5\u751f\u4ea7\u90e8\u7f72\u8981\u914d Redis \u7f13\u5b58\u548c PostgreSQL \u4e3b\u4ece\u8bfb\u5199\u5206\u79bb\u3002<\/p>\n<hr \/>\n<h3>\u5199\u5728\u6700\u540e<\/h3>\n<p>OTP \u52a8\u6001\u53e3\u4ee4\u662f\u4f01\u4e1a MFA \u5efa\u8bbe\u91cc\u6295\u5165\u4ea7\u51fa\u6bd4\u6700\u9ad8\u7684\u4e00\u6b65&#xff1a;\u8f6f\u4ee4\u724c\u96f6\u786c\u4ef6\u6210\u672c\u3001\u5fae\u4fe1\u5c0f\u7a0b\u5e8f\u96f6\u5b89\u88c5\u95e8\u69db\u3001RADIUS \u5bf9\u63a5\u96f6\u8bbe\u5907\u66f4\u6362\u3002<\/p>\n<p>\u4f46\u5b83\u4e0d\u662f\u7ec8\u70b9\u3002\u5408\u7406\u7684\u8def\u7ebf\u56fe\u662f&#xff1a;<\/p>\n<li>\u7b2c\u4e00\u9636\u6bb5&#xff1a;\u90ae\u7bb1\u3001\u4e91\u684c\u9762\u4e0a OTP&#xff0c;\u628a\u6700\u5927\u7684\u66b4\u9732\u9762\u76d6\u4f4f<\/li>\n<li>\u7b2c\u4e8c\u9636\u6bb5&#xff1a;\u7ba1\u7406\u5458\u3001\u5821\u5792\u673a\u3001\u670d\u52a1\u5668\u767b\u5f55\u5347\u7ea7\u5230 UKey \/ FIDO2<\/li>\n<li>\u7b2c\u4e09\u9636\u6bb5&#xff1a;\u6309\u8bbf\u95ee\u6765\u6e90\u548c\u8bbe\u5907\u72b6\u6001\u505a\u81ea\u9002\u5e94\u8ba4\u8bc1&#xff0c;\u5185\u7f51\u5c11\u6253\u6270\u3001\u5916\u7f51\u5f3a\u6821\u9a8c<\/li>\n<p>\u5148\u628a\u7b2c\u4e00\u9636\u6bb5\u505a\u5b8c&#xff0c;\u4f60\u4f1a\u53d1\u73b0\u4f01\u4e1a\u6574\u4f53\u7684\u8d26\u53f7\u5b89\u5168\u6c34\u4f4d\u5df2\u7ecf\u4e0a\u4e86\u4e00\u4e2a\u53f0\u9636\u3002<\/p>\n<hr \/>\n<p>\u672c\u6587\u6280\u672f\u5185\u5bb9\u53c2\u8003\u300a\u5b89\u5f53 ASP \u8eab\u4efd\u8ba4\u8bc1\u670d\u52a1\u5e73\u53f0\u6280\u672f\u767d\u76ae\u4e66 V4.0\u300b\u3002ASP \u7684 OTP \u52a8\u6001\u53e3\u4ee4\u652f\u6301 OATH \u6807\u51c6 TOTP \u4e0e\u56fd\u5bc6 SM3 \u7b97\u6cd5&#xff0c;\u63d0\u4f9b\u5fae\u4fe1\u5c0f\u7a0b\u5e8f\u4ee4\u724c\u3001PC \u7aef\u7a0b\u5e8f\u4e0e\u786c\u4ef6\u4ee4\u724c\u591a\u79cd\u5f62\u6001\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5728\u6240\u6709\u591a\u56e0\u7d20\u8ba4\u8bc1&#xff08;MFA&#xff09;\u56e0\u5b50\u91cc&#xff0c;OTP \u52a8\u6001\u53e3\u4ee4\u662f\u843d\u5730\u6210\u672c\u6700\u4f4e\u7684\u4e00\u4e2a&#xff1a;\u4e0d\u7528\u53d1\u786c\u4ef6\u3001\u4e0d\u7528\u6539\u7ec8\u7aef\u3001\u5458\u5de5\u624b\u673a\u4e0a\u88c5\u4e2a\u5c0f\u7a0b\u5e8f\u5c31\u80fd\u7528\u3002<br \/>\n\u4e5f\u6b63\u56e0\u4e3a\u95e8\u69db\u4f4e&#xff0c;\u5b83\u662f\u5927\u591a\u6570\u4f01\u4e1a\u8fc8\u5411\u53cc\u56e0\u7d20\u8ba4\u8bc1\u7684\u7b2c\u4e00\u6b65\u3002\u4f46\u771f\u6b63\u505a\u8fc7\u7684\u4eba\u77e5\u9053&#xff0c;OTP \u6709\u51e0\u4e2a\u5751\u4e0d\u8e29\u4e00\u6b21\u8bb0\u4e0d\u4f4f&#xff1a;\u65f6\u95f4\u6f02\u79fb\u3001\u4ee4\u724c\u4e22\u5931\u3001\u5171\u7528\u8d26\u53f7\u7ed1\u5b9a\u3001\u8001\u8bbe\u5907\u4e0d\u652f\u6301\u4e8c\u6b21\u8f93\u5165\u2026\u2026<br \/>\n\u8fd9\u7bc7\u6587\u7ae0\u4ece TOTP \u7b97\u6cd5\u539f\u7406\u8bb2\u8d77&#xff0c;\u628a OTP \u5728\u4e91\u684c\u9762\/AD \u57df\u3001\u8fdc\u7a0b\u63a5\u5165<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[392,120,1133,100,188],"topic":[],"class_list":["post-91042","post","type-post","status-publish","format-standard","hentry","category-server","tag-jenkins","tag-kubernetes","tag-servlet","tag-100","tag-188"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>OTP \u52a8\u6001\u53e3\u4ee4\u8ba4\u8bc1\u600e\u4e48\u843d\u5730\uff1f\u4ece TOTP \u539f\u7406\u5230\u4e91\u684c\u9762\u3001\u4f01\u4e1a\u90ae\u7bb1\u4e09\u7c7b\u573a\u666f\u5b9e\u6218 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/91042.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OTP \u52a8\u6001\u53e3\u4ee4\u8ba4\u8bc1\u600e\u4e48\u843d\u5730\uff1f\u4ece TOTP \u539f\u7406\u5230\u4e91\u684c\u9762\u3001\u4f01\u4e1a\u90ae\u7bb1\u4e09\u7c7b\u573a\u666f\u5b9e\u6218 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u5728\u6240\u6709\u591a\u56e0\u7d20\u8ba4\u8bc1&#xff08;MFA&#xff09;\u56e0\u5b50\u91cc&#xff0c;OTP \u52a8\u6001\u53e3\u4ee4\u662f\u843d\u5730\u6210\u672c\u6700\u4f4e\u7684\u4e00\u4e2a&#xff1a;\u4e0d\u7528\u53d1\u786c\u4ef6\u3001\u4e0d\u7528\u6539\u7ec8\u7aef\u3001\u5458\u5de5\u624b\u673a\u4e0a\u88c5\u4e2a\u5c0f\u7a0b\u5e8f\u5c31\u80fd\u7528\u3002 \u4e5f\u6b63\u56e0\u4e3a\u95e8\u69db\u4f4e&#xff0c;\u5b83\u662f\u5927\u591a\u6570\u4f01\u4e1a\u8fc8\u5411\u53cc\u56e0\u7d20\u8ba4\u8bc1\u7684\u7b2c\u4e00\u6b65\u3002\u4f46\u771f\u6b63\u505a\u8fc7\u7684\u4eba\u77e5\u9053&#xff0c;OTP \u6709\u51e0\u4e2a\u5751\u4e0d\u8e29\u4e00\u6b21\u8bb0\u4e0d\u4f4f&#xff1a;\u65f6\u95f4\u6f02\u79fb\u3001\u4ee4\u724c\u4e22\u5931\u3001\u5171\u7528\u8d26\u53f7\u7ed1\u5b9a\u3001\u8001\u8bbe\u5907\u4e0d\u652f\u6301\u4e8c\u6b21\u8f93\u5165\u2026\u2026 \u8fd9\u7bc7\u6587\u7ae0\u4ece TOTP \u7b97\u6cd5\u539f\u7406\u8bb2\u8d77&#xff0c;\u628a OTP \u5728\u4e91\u684c\u9762\/AD \u57df\u3001\u8fdc\u7a0b\u63a5\u5165\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/91042.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-06T10:32:50+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/91042.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/91042.html\",\"name\":\"OTP \u52a8\u6001\u53e3\u4ee4\u8ba4\u8bc1\u600e\u4e48\u843d\u5730\uff1f\u4ece TOTP \u539f\u7406\u5230\u4e91\u684c\u9762\u3001\u4f01\u4e1a\u90ae\u7bb1\u4e09\u7c7b\u573a\u666f\u5b9e\u6218 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-08-06T10:32:50+00:00\",\"dateModified\":\"2026-08-06T10:32:50+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/91042.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/91042.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/91042.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OTP \u52a8\u6001\u53e3\u4ee4\u8ba4\u8bc1\u600e\u4e48\u843d\u5730\uff1f\u4ece TOTP \u539f\u7406\u5230\u4e91\u684c\u9762\u3001\u4f01\u4e1a\u90ae\u7bb1\u4e09\u7c7b\u573a\u666f\u5b9e\u6218\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OTP \u52a8\u6001\u53e3\u4ee4\u8ba4\u8bc1\u600e\u4e48\u843d\u5730\uff1f\u4ece TOTP \u539f\u7406\u5230\u4e91\u684c\u9762\u3001\u4f01\u4e1a\u90ae\u7bb1\u4e09\u7c7b\u573a\u666f\u5b9e\u6218 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/91042.html","og_locale":"zh_CN","og_type":"article","og_title":"OTP \u52a8\u6001\u53e3\u4ee4\u8ba4\u8bc1\u600e\u4e48\u843d\u5730\uff1f\u4ece TOTP \u539f\u7406\u5230\u4e91\u684c\u9762\u3001\u4f01\u4e1a\u90ae\u7bb1\u4e09\u7c7b\u573a\u666f\u5b9e\u6218 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u5728\u6240\u6709\u591a\u56e0\u7d20\u8ba4\u8bc1&#xff08;MFA&#xff09;\u56e0\u5b50\u91cc&#xff0c;OTP \u52a8\u6001\u53e3\u4ee4\u662f\u843d\u5730\u6210\u672c\u6700\u4f4e\u7684\u4e00\u4e2a&#xff1a;\u4e0d\u7528\u53d1\u786c\u4ef6\u3001\u4e0d\u7528\u6539\u7ec8\u7aef\u3001\u5458\u5de5\u624b\u673a\u4e0a\u88c5\u4e2a\u5c0f\u7a0b\u5e8f\u5c31\u80fd\u7528\u3002 \u4e5f\u6b63\u56e0\u4e3a\u95e8\u69db\u4f4e&#xff0c;\u5b83\u662f\u5927\u591a\u6570\u4f01\u4e1a\u8fc8\u5411\u53cc\u56e0\u7d20\u8ba4\u8bc1\u7684\u7b2c\u4e00\u6b65\u3002\u4f46\u771f\u6b63\u505a\u8fc7\u7684\u4eba\u77e5\u9053&#xff0c;OTP \u6709\u51e0\u4e2a\u5751\u4e0d\u8e29\u4e00\u6b21\u8bb0\u4e0d\u4f4f&#xff1a;\u65f6\u95f4\u6f02\u79fb\u3001\u4ee4\u724c\u4e22\u5931\u3001\u5171\u7528\u8d26\u53f7\u7ed1\u5b9a\u3001\u8001\u8bbe\u5907\u4e0d\u652f\u6301\u4e8c\u6b21\u8f93\u5165\u2026\u2026 \u8fd9\u7bc7\u6587\u7ae0\u4ece TOTP \u7b97\u6cd5\u539f\u7406\u8bb2\u8d77&#xff0c;\u628a OTP \u5728\u4e91\u684c\u9762\/AD \u57df\u3001\u8fdc\u7a0b\u63a5\u5165","og_url":"https:\/\/www.wsisp.com\/helps\/91042.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-08-06T10:32:50+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"3 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/91042.html","url":"https:\/\/www.wsisp.com\/helps\/91042.html","name":"OTP \u52a8\u6001\u53e3\u4ee4\u8ba4\u8bc1\u600e\u4e48\u843d\u5730\uff1f\u4ece TOTP \u539f\u7406\u5230\u4e91\u684c\u9762\u3001\u4f01\u4e1a\u90ae\u7bb1\u4e09\u7c7b\u573a\u666f\u5b9e\u6218 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-08-06T10:32:50+00:00","dateModified":"2026-08-06T10:32:50+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/91042.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/91042.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/91042.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"OTP \u52a8\u6001\u53e3\u4ee4\u8ba4\u8bc1\u600e\u4e48\u843d\u5730\uff1f\u4ece TOTP \u539f\u7406\u5230\u4e91\u684c\u9762\u3001\u4f01\u4e1a\u90ae\u7bb1\u4e09\u7c7b\u573a\u666f\u5b9e\u6218"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/91042","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=91042"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/91042\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=91042"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=91042"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=91042"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=91042"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}