Method for protecting security of account

Abstract

The invention relates to an operational application technology combining short message transmission and computer database, in particular to a method for protecting the security of an account. The method is characterized in that: user login and server verification are required to be performed twice respectively, and passwords for the user login of each time are both dynamic passwords; in the login of the first time, the dynamic password A and the user account are input, and the dynamic password A becomes invalid instantly when the dynamic password A and the user account pass the verification; a dynamic identification code is displayed in a login interface in which the dynamic password A and the user account pass the verification; the user is required to compare the dynamic identification code in the login interface with the dynamic identification code in a received mobile phone short message, and then enters the login step of inputting the dynamic password B and a static password after confirming the two groups of dynamic identification codes are completely the same; and after the successful login of the user, the dynamic identification code and the dynamic password B become invalid instantly. By the method provided by the invention, attacks of account stealing Trojans can be effectively prevented, the phishing attacks of phishing sites to the users can be prevented, and the method is simple and intuitive for the user to operate and easy to master.

Description

technical field [0001] The invention relates to the operation and application technology combining short message transmission and computer database, in particular to a method for protecting account security. Background technique [0002] At present, there are mainly four methods of public account protection as follows: [0003] The first is the static password authentication technology, which uses the user's "account name" and "password" to authenticate and identify the legitimacy of the user. Its main feature is to use a fixed password to activate a specific account, but due to the password and As a soft identifier, the account number is static and unchanged, and it is transmitted in the network. There are many disadvantages and security holes. The cracking technology for it is constantly developing, and many tools and methods can be used to steal account passwords, such as stealing, deciphering, etc. , Peeping, cheating, etc. In addition, there are high requirements for u...

AI Technical Summary

Problems solved by technology

This is because the account information and key used for identity authentication are not directly readable, external applications can only send input factors used for calculation, and the entire calculation process is completely completed by the CPU in the ePass online game anti-theft lock. The calculation result is transmitted to the external application, so that the key is absolutely impossible to be intercepted by an external hacker program, and the calculation of the key is an irreversible algorithm, and the value of the key cannot be reversed through the calculation structure, and then passed to ePass The external calculation results of the online game anti-theft lock will also change with each input data. Even if the value calculated for each authentication is recorded, the purpose of false identity cannot be achieved. Its advantages are: not afraid of eavesdropping, not afraid of peeping, cracking, No need for memory, small size, easy to carry, the disadvantages of this technology: high cost of use, easy to lose, easy to damage, low reliability, criminals can decipher the Ukey password through the Trojan virus in the computer, and users use the U key Need to install the driver, and constantly upgrade the driver, the operation is cumbersome

[0007] The above-mentioned methods can neither prevent the attack of account hacking Trojans, nor can the user verify the authenticity of the login interface. If criminals use phishing websites to attack users, the security of the account cannot be guaranteed: criminals use various means , Fake the URL address and page content of the real website, or use the loopholes in the real website server program to insert dangerous HTML codes into some webpages of the site, defraud the user's account number, password and other private information, and at the same time, in a very short period of time Use the user's account number and password to log in to the real website and steal the user's property

Images