Time synchronizing dynamic token and method for generating a plurality of dynamic passwords in real time

Abstract

The invention relates to a dynamic token, in particular to a time synchronizing dynamic token and a method for generating a plurality of dynamic passwords in real time. The time synchronizing dynamic token is additionally provided with a local counter. In the set time interval for generating a primary dynamic password, the current time value for generating the primary dynamic password and the value of the local counter are used as the input for generating an auxiliary dynamic password, thus a plurality of dynamic passwords are generated in the time interval. The invention meets the requirement of the user for obtaining a plurality of real-time dynamic passwords in the set time interval.

Description

technical field [0001] The invention relates to a dynamic token, in particular to a time synchronous dynamic token capable of generating multiple dynamic passwords in real time and a method for generating multiple real-time dynamic passwords. Background technique [0002] Identity authentication is an important part of the information security system. Its task is to verify the legitimacy and authenticity of information system user identities, access system resources according to the authority granted by the system, and keep illegal visitors out. [0003] Identity authentication technology is divided into: static password authentication, dynamic password authentication, biotechnology (fingerprint, iris, face, etc.) authentication, digital certificate (CA) authentication issued by a third party, etc. Static password authentication is an early identity authentication product of computer systems. Due to the static characteristics and reusability of static passwords, there are se...

AI Technical Summary

Problems solved by technology

[0013] The second method increases the value of the time synchronization window, that is, at the current time, there are more valid dynamic passwords, which increases the risk of dynamic passwords being guessed. At the same time, the server needs to compare each dynamic password. Increased load on authentication server

[0014] The first and second methods both reduce the security strength of the dynamic password, and the second method also increases the load on the authentication server, and cannot meet higher real-time requirements

[0015] In the third way, the event synchronization token has inherent problems of being out of sync, and the security problem that the dynamic password can be recorded and used later, making it gradually tend to be replaced by the time synchronization dynamic token

Images