Abstract: In order to overcome the disadvantages of login methods of current enterprise information systems on security and flexibility, an identification system for enterprise users based on national commercial cryptographic algorithms and physical un-clone-able function is designed and implemented. The frame of FIDO U2F is used in this system with identity tokens as the second factors in user authentication. Moreover, by using national commercial cryptographic algorithms, autonomous and manageable security is obtained. Thus the system achieves high security and flexibility. The security analysis shows that the system is evidently more secure than current other enterprise identification systems. The experimental results show that the system takes advantage of low overhead and high reliability thus can be implemented in enterprise information systems easily and quickly.

Key words: identification, enterprise information system, physical un-clone-able function, fast identification online, true random number generator, identity token