Method for acquiring dynamic password based on public key architecture-user personal identification card

Abstract

The invention discloses a method for obtaining dynamic password based on PKI-SIM card. The method includes: PKI-SIM card judges OPT service whether open or not according with appointed disposable dynamic password, if not open, OPT service is customed to system, PKI-SIM card gives PKI-SIM card mark and secret key from itself to SP background server in course of customing OTP service; after the OPT service opened, PKI-SIM card generates dynamic password by using PKI-SIM card mark and secret key. The invention can avoid many limitations caused by traditional token card technique because of time synchronization by using date synchronization method of PKI-SIM card and SP background server.

Description

technical field [0001] The invention relates to the field of network security, in particular to a method for obtaining a dynamic password based on a public key system-Subscriber Identity Model (PKI-SIM). Background technique [0002] At present, the one-time password method (OTP, One-Time Password) has been widely used in the field of identity authentication because of its advantages of one-time password, effective prevention of replay attack (Replay Attack), and no need for the user's real password to be transmitted on the Internet. . [0003] In the more popular OTP method, the dynamic token card (Token) uses a special hardware-token card, uses a password generation chip to run a special password algorithm, and generates the current password according to the current time. This technology is based on the time synchronization between the token card and the service provider (SP) background server, and generates a consistent dynamic password through calculation. The update ra...

AI Technical Summary

Problems solved by technology

[0005] In the above-mentioned technical scheme of generating a dynamic password by using a dynamic token card, since the basis for synchronization is the international standard time, the SP background server is required to maintain the correct clock very accurately, and the clock must not be changed arbitrarily, so as to avoid synchronization problems and affect All tokens that are authenticated based on this SP background server also have stricter requirements on the manufacturing process of the token card to reduce the probability that the token card and the SP background server will lose synchronization. In addition, for tokens that lose time synchronization At present, remote synchronization can be performed by increasing the inspection window technology (10 minutes or more before and after) to ensure that it can continue to be used, but this method will increase the success probability of brute force attacks and reduce the security of the identity authentication system

[0006] It can be seen that the traditional token card technology has the limitation of requiring too high accuracy of the clock due to the method based on time synchronization

Images