Identity authentication method, device and system

Abstract

The invention discloses an identity authentication method comprising the steps of: filling n (n is more than 10) different symbols of a first type into the first n grids in a decoding table with i*j (i*j is not smaller than n) grids by an authentication end, forming i*j symbol groups respectively corresponding to the i*j grids by i symbols of a second type and j symbols of a third type, and providing the decoding table to a user end; when the user end requests authentication from the authentication end, randomly selecting k symbol groups from the first n symbol groups of the i*j symbol groups by the authentication end, and randomly arraying the k symbol groups into annular query codes to be sent to the user end; sequentially selecting p (p is smaller than k) adjacent symbol groups from the annular query codes by the user end, and sending a group of answer codes corresponding to the p symbol groups to the authentication end according to the decoding table by the user end; and finding out q (q is not smaller than p) symbol groups corresponding to the answer codes by the authentication end according to the decoding table, judging whether the q symbol groups are adjacent to at least p symbol groups in the query codes, and if so, judging that the user end passes the authentication.

Description

technical field [0001] The invention relates to an authentication method, in particular to a method for a server to authenticate a user's identity, so that the user can obtain the use authority of the server or another system or conduct network transactions. Background technique [0002] Due to its simplicity, traditional passwords have always been the most basic identity authentication method for computer use. However, because traditional passwords are simple, they are easy to be peeped, guessed, or cracked by means of Trojan horse programs, phishing, etc. [0003] Therefore, in view of the above problems, it is known to propose various identity security technologies, such as PKI, OTP, . . . and other identity authentication methods to further ensure the security of users and systems. These known authentication methods have their advantages and characteristics, but there are still two main disadvantages: 1. The user must use additional electronic devices, such as chip cards...

AI Technical Summary

Problems solved by technology

These known authentication methods have their advantages and characteristics, but there are still two main disadvantages: 1. The user must use additional electronic devices, such as chip cards and card readers, password generators, etc. to perform identity verification Authentication, the use threshold is high and the operation is inconvenient, which is not conducive to popularization; 2. Some authentication technologies still have loopholes in security, for example, OTP cannot prevent phishing

Therefore, known identity authentication methods still cannot completely prevent various network attacks

Images