Secure certification and transaction method with combination of digital certificate and one-time password

Abstract

The invention discloses a secure certification and transaction method with the combination of a digital certificate and a one-time password. The method comprises two steps of: a secure certification method and a secure transaction method. The secure certification and transaction method specifically comprises the steps of: first, performing bidirectional certification between a client and a server on the basis of the digital certificate; then, realizing secure certification through the combination of the digital certificate and the one-time password on the basis of the bidirectional certification; and finally, realizing secure transaction through the combination of the digital certificate and the one-time password on the basis of the bidirectional certification. By the method, the identities of users are confirmed by combining the digital certificate and the one-time password so as to realize the secure login and secure transaction of various application systems. By the method, the digital certificate and the one-time password are organically combined, so that the safety hidden trouble caused by separately using the digital certificate or the one-time password is avoided, respective security advantages of the digital certificate and the one-time password are fully exerted, various attacks can be resisted, high security is achieved, the demand of various high security application in the network can be met, and the method has higher practical value and broad application prospect in the field of network security technology.

Description

(1) Technical field [0001] The invention relates to a safety authentication and transaction method combining digital certificates and dynamic passwords in an open network environment, which mainly solves the security problems of identity authentication and electronic transactions, and belongs to the technical field of information security. (2) Background technology [0002] With the continuous development of the Internet, more and more online banking, e-commerce and e-government are processed through the network. How to ensure the security of online business is the main problem currently facing. As the first line of defense in network security, identity authentication is the security portal of the network system. Both access control and resource security rely on user identities provided by the authentication system. Once the identity authentication system is breached, all the security measures of the system will be useless, which shows that the identity authentication syste...

AI Technical Summary

Problems solved by technology

[0017] 1. Purpose: In order to solve the security problems existing in the existing methods, the present invention provides a security authentication and transaction method combining digital certificates and dynamic passwords, which overcomes the shortcomings of using digital certificates and dynamic passwords alone, and fully utilizes their respective Advantages to achieve safe and reliable identity authentication and online transactions

Images