Authentication device, method and system

Abstract

The apparatus thereof comprises: a memory module, a trigger module, an acquisition module, a delete module, a control module and a power module. The method comprises: the authentication device selects the authentication password from the pre-saved authentication passwords as the authentication code, and deletes the selected authentication password from the pre-saved authentication passwords; the client side sends the received user's ID and authentication code to the serving side; the serving side comparing the authentication code with the authentication password, if they are matching, then the authentication is passed; otherwise, the authentication. The system thereof comprises: authentication device, client side and serving side.

Description

technical field [0001] The invention relates to the field of information security, in particular to an authentication device, method and system. Background technique [0002] In recent years, with the rapid development of the network and the great convenience it provides, people increasingly rely on network means for various activities, including identification, online banking and VPN (Virtual Private Network, also known as for a virtual private network), etc. [0003] Correspondingly, network information security has attracted more and more people's attention. In recent years, an information security product has appeared, that is, a portable hardware device that can be used for mobile use, generally called information security equipment. A small hardware device with a processor and memory. The information security device establishes a connection with the host through the data communication interface of the host. The processor in the device generally adopts a security desi...

AI Technical Summary

Problems solved by technology

[0007] 1) The information security device has a built-in password generation chip, and a special password generation algorithm is built into the password generation chip, which is used to generate a dynamic password through the algorithm every time the user authenticates, so the general hardware cost will be relatively high;

[0008] 2) For information security devices that use time factors to dynamically generate authentication passwords, there is a technical difficulty in the implementation of how to achieve time synchronization between information security devices and the server, because there are often times when legitimate users fail to authenticate due to time asynchrony , that is, information security devices that use time factors to dynamically generate authentication passwords have certain instability

[0009] 3) For information security devices that use event factors to dynamically generate authentication passwords, there is also a problem in the implementation, which is the failure of legal user authentication caused by out-of-sync counting

For example, when the user accidentally presses a button or other misoperation, the authentication password generated by pressing the button is not authenticated on the server, so that the event factors in the information security device and the server are inconsistent, so that in the next authentication, due to The dynamic calculation factors used by the information security device and the server to generate authentication passwords, that is, the event factors, are inconsistent, resulting in inconsistent authentication passwords generated by both ends, so legitimate users cannot log in successfully, and identity authentication fails.

Images