Dynamic token as well as two-way authentication method and two-way authentication system with dynamic token

Abstract

The invention discloses a dynamic token as well as a two-way authentication method, and a two-way authentication system with the dynamic token, wherein the dynamic token comprises an input module, an input control module, a dynamic password control module, a display control module and a display module, wherein the input module is used for inputting server authentication codes by a user; the input control module is used for parsing the server authentication codes; the dynamic password control module is used for calculating an authentication code block within the current time slot according to the current time, authenticating the server authentication codes, and generating a dynamic password according to the current time; the display control module is used for parsing the authentication results and the dynamic password output by the dynamic password control module; and the display module is used for displaying the authentication results and the dynamic password parsed by the control module. According to the invention, the two-way authentication on the user identity and server identity is realized, the hostile attack is effectively prevented, and the safety of user information is ensured.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a dynamic token and a two-way authentication method and system with the dynamic token. Background technique [0002] Identity authentication is the security foundation of various business-critical applications such as e-commerce and e-government. Identity authentication technologies include: static password authentication, dynamic password authentication, biotechnology authentication, digital certificate authentication issued by a third party, etc. [0003] The problem with static password authentication is that due to the static characteristics and repeated practicability of static passwords, they are easy to be stolen, guessed or cracked, so that hackers can pretend to be legal identities to enter personal accounts, steal key information, and cause serious losses to users. . [0004] Other identity authentication technologies, such as biometric authentication and...

AI Technical Summary

Problems solved by technology

[0003] The problem with static password authentication is that due to the static characteristics and repeated practicability of static passwords, they are easy to be stolen, guessed or cracked, so that hackers can pretend to be legal identities to enter personal accounts, steal key information, and cause serious losses to users.

[0007] The problem with dynamic tokens is that the generated password needs to be verified by the server-side authentication system. This process is one-way, that is to say, only the server-side verifies the identity of the token holder. However, due to the complex environment of the real network, Malicious attackers or hackers will pretend to be the authentication server and deceive users to obtain the personal information of the token holder, thereby reducing the security strength

Images