One-time password authentication system and authentication method used for B/S (Browser/Server) network structure

Abstract

The invention relates to a one-time password (OTP) authentication system and authentication method used for a B / S (Browser / Server) network structure. The authentication system comprises a hardware token, an initializing tool, a client system, a management system and au authentication server. The initializing tool completes the initialization flow of the hardware token; the hardware token providesan OTP required by authentication for a user; the user inputs the OTP into the client system, and the client system sends the OTP to the authentication server; the authentication server completes theauthentication process and returns the result back to the client system, and the client system finally feeds back the result to the user; the management system completes system management and maintenance and sends a management operation request to the authentication server and a client server as specified; and the authentication server and the client server receive the request, complete the operation and return the operation result. The authentication method comprises system initialization, login authentication and system management and comprises eight specific steps. User authentication and system management can be completed by the browser page mode, so that the invention has the advantages of convenient use, easy maintenance, practical value and broad application prospects.

Description

(1) Technical field [0001] The invention relates to Internet security identity authentication technology, in particular to a one-time password authentication system and authentication method for B / S (browser / server) network structure. It belongs to the technical field of computer and information security. (2) Background technology [0002] Identity authentication is the first line of defense in a network application system, which can restrict illegal users from accessing network resources. However, the commonly used static passwords have many inherent weaknesses, such as easy guessing or eavesdropping, and are easily affected by attack methods such as replay attacks, thus burying hidden dangers to the security of the system. For the shortcomings of static passwords, the OTP (One Time Password) authentication technology makes each authentication use a different password, even if the password is stolen, the attacker cannot reuse it. OTP authentication has been more and more ...

AI Technical Summary

Problems solved by technology

At the same time, the OTP generation methods of existing solutions are mostly time-based. On the one hand, the clock accuracy is very high, and the synchronization process is difficult to grasp; , it is necessary to ensure real-time power-on status, which consumes a lot of power

Images