Physical certifying method and device

Abstract

The method comprises; setting up a key and a corresponding relation between the operation command and the physical authentication; receiving the operation command; enquiring the key used by the operation command; according to the key, establishing a corresponding relation between the operation command and the physical authentication to get the physical authentication mode corresponding to the operation command; according to the physical authentication mode, initiating a physical authentication operation; if the physical authentication is passed, executing the operation command; otherwise, ending the procedure. The apparatus of the physical authentication comprise: an operation corresponding relation module, a processor, a physical authentication module respectively connected to the processor, an operational calculation module and a data memory module.

Description

technical field [0001] The invention relates to the field of computer and communication security, in particular to a physical authentication method and device. Background technique [0002] In any network transaction environment, security issues mainly exist in the source, sink and channel, or in the server, network and client. At present, the security of the server can be guaranteed by means of physical control, security management, high-level hardware platform and operating system, system and network security software and equipment. The security of data transmission on the network can be solved by data encryption and decryption technology based on cryptography methods, and the effect is very good. The client refers to the application program installed on the user's computer and its related software and hardware operating environment. Since the network management system cannot control the user's computer and check it, and the client user in the network environment obtains ...

AI Technical Summary

Problems solved by technology

These authentication methods can realize the authentication of the legality of the transaction, and can also authenticate the legality of the user's identity to a certain extent, but these authentication methods cannot solve the binding problem between the legal user and the electronic device, that is, they cannot Guarantee that legitimate users are engaging in legitimate transactions

For example, the "Trojan horse" program residing in the user's computer can monitor the running process of the client application program, obtain the legal use password without the legitimate user's knowledge, and can start the electronic device to generate a legal digital signature , to complete the online transaction process, so these authentication methods still have major security risks

Images