Mobile authentication system based on intelligent mobile phone

Abstract

The invention discloses a system combined with smartphones of carrying out digital signature and certification, file encryption and decryption by utilizing mobile key technology, which saves user keys or certificates on the smartphones and also carries out the processes of signature / certification, encryption / decryption on the smartphones. The invention mainly uses a smartphone of Windows mobile operating system, a desktop computer software module and a smartphone software module. Firstly, a mobile key client is designed and realized on the desktop computer, including file encryption and decryption files, office signature, and certification Plug-ins. Then, a security system of mathematical manipulation of digital signature, certification, file encryption / decryption, etc. is designed and realized on the smartphone. Beside the inherent advantages of a USB key of convenient use, high security, etc., the invention also has multiple advantages that the USB Key does not have, such as, rapid arithmetic speed, long key support, supporting the processing of overlarge files, good sharing performance, high security and better expandability.

Description

technical field [0001] The present invention relates to the field of information security, and specifically relates to a technology that can adopt various information security algorithms and combine smart phones to perform signature, authentication, and encryption / decryption. technical background [0002] With the continuous development of the Internet, more and more people have begun to try online transactions. However, malicious threats such as viruses, hackers, phishing and phishing scams have brought great challenges to the security of online transactions. According to a survey conducted by a research agency, the total direct losses suffered by banks and consumers in the United States last year due to cyber fraud incidents amounted to US$2.4 billion, and each victim paid an average of US$1,200. According to Hong Kong Ming Pao News, the direct losses caused by cyber fraud in Hong Kong last year amounted to 1.4 million Hong Kong dollars. The endless network crimes have c...

AI Technical Summary

Problems solved by technology

Due to the limitation of USB Key's own conditions, the operation speed of the single-chip microcomputer is slow, and it takes a long time to generate some long key pairs. In many cases, it is impossible to achieve one-time encryption.

This is a security risk

[0005] 2) The key length is limited

The built-in storage space in the USB Key is generally only a few tens of bytes, which can only save a small amount of key information, and it is impossible to use a very long key or digital certificate. In cryptography, the longer the key length, the safer it is. However, because the USB Key cannot support a longer key, it has a security risk

[0006] 3) The plaintext length is limited

[0007] 4) Poor scalability

Due to the limitations of USB Key hardware conditions, a USB Key generally only has one encryption algorithm embedded, and when some better encryption algorithms appear, it cannot be expanded

[0008] 5) Security issues

Therefore, it is possible for hackers to control the USB Key through remote operation to perform some unauthorized operations

[0009] 6) It is impossible to know the plaintext information in the process of encryption / decryption, etc.

USB Key generally only has a very small screen (many have almost none), and it is impossible to display some important information in the process of encryption, decryption, etc.

In online transactions, if some plaintext information cannot be known, and if the plaintext is tampered with or wrong before encryption, the consequences will be disastrous

Images