Method for protecting account number safety

Abstract

The invention provides a method for protecting the account number cryptographic security, wherein the system reliability is high, the transferring secret degree of the dynamic cipher information is high, which is not afraid of declassification and watching stealthily, meanwhile can effectively keep away the attack of cockhorse viral with low cost. The method includes the following steps: (1) registering; (2) entry request; (3) sever authentication; (4) transmitting the dynamic cipher; (5) user's entry; (6) sever authentication, which is characterized in that the steps of (5) and (6) need to be executed for two times respectively, and the ciphers for entry for two times are both dynamic ciphers. The account number and the dynamic cipher A are input in the first entry, the dynamic cipher A is out of work immediately after passing by the authentication, then the dynamic cipher B is input for the next entry, the dynamic cipher B is out of work immediately after the successful entry.

Description

(1) Technical field [0001] The invention relates to the operation and application technology combining short message transmission and computer database, in particular to a method for protecting account security. (2) Background technology [0002] At present, there are mainly four methods of public account protection as follows: [0003] The first is the static password authentication technology, which uses the user's "account name" and "password" to authenticate and identify the legitimacy of the user. Its main feature is to use a fixed password to activate a specific account, but due to the password and As a soft identifier, the account number is static and unchanged, and it is transmitted in the network. There are many disadvantages and security holes. The cracking technology for it is constantly developing, and many tools and methods can be used to steal account passwords, such as stealing, deciphering, etc. , Peeping, cheating, etc. In addition, there are high requireme...

AI Technical Summary

Problems solved by technology

Since the password changes dynamically with time, it is impossible for anyone without a password card to know the password. Therefore, this password technology is much safer than the static password. , easy to carry, the defects of this technology: high cost of use, easy to lose, easy to damage, low reliability, password generation depends entirely on time synchronization, if the time difference between the client and server is large, the password card will fail and cause The user cannot log in to the system

It has a common shortcoming with the second technology that it cannot prevent new types of Trojan horses (the characteristics of this Trojan horse are: when the user logs in, the client is disconnected, or the login box repeatedly appears to prevent the user from successfully logging in, and at the same time the user password is intercepted. And forward it to the email address designated by the Trojan horse broadcaster

) attack, because the attack method of this type of Trojan horse is to prevent the user from successfully logging in and intercepting the user's account number and password at the same time when the user logs in to the client, because the user has not completed the login on the client, so within a certain period of time The dynamic password sent by the password card or the mobile phone SMS will not change, once it is stolen at the same time as the static password, it still cannot fully protect the security of the account

Images