Bidirectional authentication method and system for dynamic token

Abstract

The invention relates to a bidirectional authentication method and a system for dynamic token, which are based on a time mechanism authentication mode. The hour and minute values of a current clock of the token are used as synchronous codes, and are inputted together with a token serial number, and a token seed file is called in an authentication server; the synchronous codes of the token are used to correct the time offset of a token system and work out a dynamic code used for 8-bit decimal system verification; high-five bits are taken to implement data conversion according to certain formats, used as the authentication codes of the authentication server and sent to a client application presentation layer authentication webpage for a user to implement authentication; the user can input the current dynamic passwords of the token and submit the passwords to the authentication server and complete identification authentication through a conventional operating flow when the authentication codes of the authentication server, shown on the client application presentation layer authentication webpage, are checked to be consistent with the token authentication codes shown by the token. Moreover, electronic token, mobile phone token, IC (integrated circuit) card token, and SIM (subscriber identify module) card inserting-type token can be used as the client bidirectional authentication token.

Description

[0001] technical field [0002] The invention belongs to the technical field of information security, and in particular relates to a dynamic token two-way authentication method and system. Background technique [0003] Confirming the legitimacy of users through the application of strong two-factor password (dynamic password and static password) authentication technology is a fast-growing security technology that uses passwords to realize identity identification in current computer networks. The application number is 2006101164625, and the Chinese patent application titled "a dynamic authentication method and system for password card based on pre-computation" discloses a dynamic token authentication method. The dynamic password generated by the operation of card) is authenticated by the authentication server to identify the legitimacy of the user. [0004] Although the technology disclosed in the above-mentioned patent application can realize the identification security of...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a dynamic token two-way authentication method and system, combined with the comprehensive application of the website server green screen certificate (EV SSL certificate) and various anti-fraud software, to solve the problem of using dynamic passwords for identity authentication in the prior art. Vulnerabilities arising from the fake website problem

Images