Device, system and method for realizing identity authentication

Abstract

The invention discloses a device, a system and a method for realizing identity authentication. On the basis of the conventional common identity authentication technology, user identity and user equipment used by a user are bound in a mode of increasing the measurement authentication of the user equipment or out-of-band identity authentication; or attack on the user identity on a network is blocked in a mode of combining the increase of the measurement authentication of the user equipment and the out-of-band identity authentication so as to improve identity authentication safety, guarantee thebenefit of a legal user and solve the problems of man-in-the-middle attack, connection hijacking attack and the like. Furthermore, the identity authentication system provided by the invention can be compatible with various existing identity authentication systems, does not need to perform overlarge modification on the conventional authentication system during implementation, has the advantages oflow investment cost and easy management and maintenance and can greatly improve the safety of the identity authentication system.

Description

[0001] This application is a divisional application of an application with an application date of October 23, 2008, an application number of 200810224837.9, and an invention title of "A Device, System and Method for Realizing Identity Authentication". technical field [0002] The invention relates to authentication technology, in particular to a device, system and method for realizing identity authentication. Background technique [0003] At present, with the rapid development of Internet technology, online transactions have penetrated into people's daily life and work, among which the applications of "online banking" and "e-commerce" are the most representative applications. For example, "online banking" is a brand-new bank customer service submission channel. Customers can handle various banking services including inquiry, transfer, payment, etc. through the Internet no matter they are at home, in the office, or on the road, and manage themselves. asset. [0004] However,...

AI Technical Summary

Problems solved by technology

Since the data read from the IC card is static each time, it is easier for an attacker to intercept the user's identity verification information through memory scanning or network monitoring, so there is a big security risk

[0021] It can be seen from the above that the existing commonly used identity authentication methods have low identity authentication security and damage the interests of legitimate users. In addition, there are also the following defects:

[0023] (2) Higher cost

[0024] (3) Complex maintenance

[0025] (4) The applicable scenarios are limited and the convenience is poor

Images