Multi-layer data mapping authentication system

Abstract

A multi-layer data mapping authentication system has a real ID authentication server, a middle data mapping server and a terminal data mapping server. The real ID authentication server links to a private network and stores real IDs and the hidden codes, each of which corresponds to a unique real ID. The terminal data mapping server links to a public network and allows an end user to link so that the end user sends the terminal data mapping server a user's code and an one-time-password (OTP). Since the middle data mapping server links between the real ID authentication server and the terminal data mapping server, the end user only uses hidden code to generate the OTP and sends the user's code and the OTP to the public network. The terminal and middle data mapping servers are converts the user's code to the corresponding real ID of the end user in the private network to complete the authentication procedure. The real ID and hidden code is not sent at the public network and is not stolen.

Description

technical field [0001] The invention relates to an identity authentication system, in particular to a multi-layer data mapping authentication system which improves the safety of online authentication. Background technique [0002] With the advent of the era of online transactions, the security of online transaction payments is becoming increasingly important. Consumers also relatively require a higher level of security transactions when paying for transactions to ensure that their private cash flow passwords will not be leaked or stolen. At present, the most commonly used technology for online cash flow authentication is dynamic password (one timepassword; OTP). [0003] The main reason why dynamic passwords are favored is that they increase the difficulty of accessing restricted resources (such as computer accounts) without authentication. Currently, there are three types of dynamic passwords. The first is to use the previous dynamic password to generate a new dynamic pas...

AI Technical Summary

Problems solved by technology

[0007] Because the card reader must input the real identity code, before the real identity code is transmitted to the real identity authentication server, it will go through the Internet or an unsafe communication path, and any non-authenticated third party may be in the Internet or unsafe communication. Stealing the real identification code of card users in the path

Therefore, although the use of dynamic passwords can reduce the chance of real ID being stolen, there is still room for improvement

Images