Method for improving identification authentication security based on password card

Abstract

The invention discloses a method for improving the security of identity authentication based on a password card, belonging to the information security field. The method comprises the following steps: information security equipment is used for receiving the serial number of a first password card inputted by the users; the generation algorithm of the password is adopted to calculate the serial number and each coordinate value within the coordinate range of a prestored first password card so as to generate a first password matrix, the serial number and the first password matrix are stored to finish the binding with the card; in the process of the identity authentication, a password is chosen from the first password matrix, which is then offered to the users with the corresponding first coordinate value; the password which is corresponding to the first coordinate value on the first password card input by the users is received, and then the chosen password and the received password are compared to finish the identity authentication. The method of the invention improves the security of the identity authentication, realizes the dynamic identification. Compared with the prior art, the method avoids the problems that if the PIN is intercepted by hackers, information inside the equipment can be stolen or illegal transactions can be done, and the like, thus improving the cracking difficulty and enhancing the security.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method for improving identity authentication security based on a password card. Background technique [0002] With the development of computer technology, people pay more and more attention to information security. In recent years, information security equipment is a small hardware device with processor and memory, which can be connected to the computer through the data communication interface of the computer. It is connected to the computer through the USB (Universal Serial Bus) interface, usually called USB KEY or USB Token (identity authentication device). The information security device has physical characteristics of anti-attack and high security, so it is widely used It is used in fields such as identification, online banking and VPN (Virtual Private Network, virtual private network), and can encrypt / decrypt the data stored in the information security device, so the in...

AI Technical Summary

Problems solved by technology

[0008] The above-mentioned prior art adopts the same PIN each time for user identity authentication on information security equipment. Although the user can modify the PIN, it usually does not modify the PIN after each identity authentication, so there is a security risk. If If the PIN is intercepted by a hacker, the hacker may use the PIN to steal sensitive information such as certificates stored in the smart key device, conduct illegal transactions, and bring losses to legitimate users

Moreover, the unlocking method in the prior art requires the user to go to a special counter, which is cumbersome and time-consuming, and if the user is in a hurry, it will cause a lot of inconvenience to the user, and even cause economic losses to the user.

Images