Method for improving identification authentication security based on password card

Abstract

The invention discloses a method for improving the security of identity authentication based on a password card, belonging to the field of information security, which comprises the following steps: information security equipment calculates the inputted serial number of a first password card by using password generation algorithm so as to generate a plurality of passwords which, except the password on the first password card, are all regarded as check codes and then the serial number and the check codes are stored to finish binding; when in the process of identity authentication, first coordinate values are offered to users and the first password calculated according to the coordinate values is compared with the password inputted by users according to the coordinate values to finish the identity authorization of users. The method improves the security of the identity authentication and realizes the dynamic identification; compared with the prior technology, the method avoids the problem that if PIN is intercepted by hackers, information inside the equipment can be stolen or illegal transactions can be carried out, and the like, and the declassification difficulty in increased and the security is improved.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method for improving identity authentication security based on a password card. Background technique [0002] With the development of computer technology, people pay more and more attention to information security. In recent years, information security equipment is a small hardware device with processor and memory, which can be connected to the computer through the data communication interface of the computer. It is connected to the computer through the USB (Universal Serial Bus) interface, usually called USB KEY or USB Token (identity authentication device). The information security device has physical characteristics of anti-attack and high security, so it is widely used It is used in fields such as identification, online banking and VPN (Virtual Private Network, virtual private network), and can encrypt / decrypt the data stored in the information security device, so the in...

AI Technical Summary

Problems solved by technology

[0008] The above-mentioned prior art adopts the same PIN each time for user identity authentication on information security equipment. Although the user can modify the PIN, it usually does not modify the PIN after each identity authentication, so there is a security risk. If If the PIN is intercepted by a hacker, the hacker may use the PIN to steal sensitive information such as certificates stored in the smart key device, conduct illegal transactions, and bring losses to legitimate users

Moreover, the unlocking method in the prior art requires the user to go to a special counter, which is cumbersome and time-consuming, and if the user is in a hurry, it will cause a lot of inconvenience to the user, and even cause economic losses to the user.

Images