Method, equipment and system for obtaining dynamic passwords to generate keys

Abstract

The invention discloses a method, equipment and a system for obtaining dynamic passwords to generate keys, which relates to the field of data security. The invention can ensure the privacy and the security of the information, can improve the distribution and management efficiency of key generation by dynamic passwords, and can bring the convenience for manufacturers to produce dynamic password cards. The method for obtaining dynamic passwords to generate keys provided by the embodiment of the invention comprises the following steps: generating public keys and private keys of the dynamic password cards; sending the public keys of the dynamic password cards to a certification server supporting a digital certificate issuing system; receiving digital certificates of the certification server sent by the certification server; using the private keys of the dynamic password cards to obtain the dynamic passwords from the certification server for generating the keys, and carrying out digital signature by the certification server on the keys generated through the dynamic passwords; verifying the digital signature of the keys generated through the dynamic passwords according to the obtained digital certificates of the certification server, and storing the dynamic passwords to generate the keys when the verification succeeds. The invention is applicable to occasions adopting telecommunication intelligent cards for certification of the dynamic passwords.

Description

technical field [0001] The invention relates to the field of data security, in particular to a method, device and system for obtaining a key for generating a dynamic password. Background technique [0002] Conventional "password" code authentication is an early identity authentication product of computer systems. Due to the static characteristics and reusability of this "password", there are security defects such as easy to steal, easy to guess, and easy to crack. It is a weak identity authentication system. , can only be used in information systems with lower security level requirements. In order to meet the requirements of information systems with higher security levels, dynamic password authentication, as a strong identity authentication system, is one of the hotspots in the current industry research. [0003] A dynamic password (Dynamic Password), also known as a one-time password (One-time Password), is a changing password, and its change comes from the change of the c...

AI Technical Summary

Problems solved by technology

Since the process of distributing the private key to the dynamic password card, writing the private key into the dynamic password card and transmitting the corresponding encrypted data file to the authentication server is all done manually, there is a high risk of private key and Security risks of encrypted data file leakage, unable to guarantee the security of information

At the same time, manufacturers also need to organize corresponding manpower and material resources to distribute and manage private keys, which brings great inconvenience and tediousness to the production of dynamic password cards.

Images