Login authentication method and login signature procedure

Abstract

The invention provides a login authentication method and a login signing procedure which relate to the technical field of computer software, internetwork communication and information security. The system presents a login screen which comprises a user name, password child window, besides, a challenging child window which gives random message generated dynamically and an agreed response child window which collects the signing information of users. Users can choose freely from a compatible password authentication and a signing authentication. The registration password is also the authentication password and the symmetrical key authentication signing; the remembrance of the registered single password can apply to the two authentications methods; the login signing procedure operates independently, instructs and judges users on the target login screen to point at or fall on the challenging child window, picks up automatically random message which is signed by a cipher device to form the signing information, fixes the position according to the predetermined strategic orientation of the signing and issuance and sends the signing information to the response child window. The method of the invention does not relate to the hardware but is the thoroughfare for a stable and seamless transition from weak password authentication to the strong signing authentication; the procedure of the invention does not relate to the application, is generally applicable and commonly used and can effectively protect the accounts of users.

Description

technical field [0001] The invention relates to the technical fields of computer software, network communication and information security. Background technique [0002] Login is the only way for users to enter and use the application system, especially the networked service system. On the login interface, the user enters login information (mainly account information, including user name / account number, password / password, and possibly auxiliary information such as a verification code), and then accepts system verification after confirmation. In the network environment, especially on the Internet, all kinds of spy programs (programs that steal user information, such as Trojan horse programs, etc.) are rampant, but they are very secretive and hard to find. They often steal account information and infringe users without knowing it. User Privacy and Property. This has become a major public hazard in the network society, greatly endangering the normal order of various networked ...

AI Technical Summary

Problems solved by technology

This invention focuses on the terminal login protection link, which is an effective method, but the shortcoming is that it does not take into account the protection of the communication transmission link

As can be seen from the fourth means of the aforementioned spy program, user account information is also at risk of being stolen during communication transmission

Images