Multi-stage authentication method and multi-stage authentication system

Abstract

The invention discloses a method and a system of multilevel certification. The method of the invention comprises the steps that: first multilevel calibration is carried out to a received resource access request, and an access voucher index and relevant address information are sent back after the calibration is successful; according to the received access voucher index, second multilevel calibration is carried out and resource data corresponding to the address information is sent back after the calibration is successful. The system comprises a first calibration module and a second calibration module; the first calibration module is used for carrying out the first multilevel calibration to the received resource access request and sending back the access voucher index and the relevant address information after the successful calibration is completed; the second calibration module is used for carrying out the second multilevel calibration according to the received access voucher index and sending back the resource data corresponding to the relevant address information after the successful calibration is completed. The invention has the advantages of safe authentication method, flexible expansion and single sign-on and unified service.

Description

technical field [0001] The invention relates to network security technology, in particular to a multi-level authentication method and a multi-level authentication system. Background technique [0002] With the continuous development of the Internet and enterprise informatization, the identity authentication technology for realizing unified authentication and single sign-on (Single Sign On, hereinafter referred to as: SSO) is also developing rapidly. [0003] There are mainly three identity authentication methods in the prior art. One is a unified identity authentication method based on the transport layer. In this method, the user first logs in with a unified account at various application systems, and then all the application systems send a verification request to the unified identity authentication server, and after receiving a response message, the application system decides whether to provide services to the user. However, this method does not have the function of sing...

AI Technical Summary

Problems solved by technology

If an attack such as modifying the local cookie value is encountered, the application of Cookie-based SSO may fail to log in or be logged in by an impersonator; if a malicious person hijacks the domain name system (Domain Name System, hereinafter referred to as: DNS) server When browsing the browser, the cookie will be sent to other servers, so that user information will be stolen; malicious people can steal user login information by hijacking data packets or using cracking algorithms or finding call interfaces to call algorithm interfaces externally; Use SSO for unified login. When a new system is connected or compatible with an old system, a major adjustment to the login function module is required, resulting in reduced efficiency and stability, and cannot be flexibly expanded.

Images