A method and system for improving verification code security

Abstract

The invention relates to a system and a method for improving the safety of a verification code. The system at least comprises a server for generating the verification code with a check part and a client with a verification code check function. The method for improving the safety of the verification code based on the system comprises four basic work processes, namely a process of generating the verification code with the check part, a process of checking the verification code, a process of generating verification information with the check part, and a process of checking the verification information. The system generates the verification code with check information when a user logs in the system; the client displays the verification code to the user after confirming that the check information in the verification code accords with the verification code, and prompts the user to input the corresponding verification information; the client generates the check part according to the verification information input by the user; and the client sends the verification information added with the check part to the system, and the system checks the correctness of the check part and the verification information. The client can be self-checked under the condition that the user continuously inputs wrong verification codes so as to confirm the correctness of the client and the operating environment of the client.

Description

technical field [0001] The invention relates to the field of information security, in particular to a system and method for enhancing the security of identity authentication on the Internet. Background technique [0002] With the development of the Internet, various network services are becoming more and more developed, including online banking, online transactions, online authentication, etc. Due to the existence of distributed denial of service attacks, crawlers, replay attacks, Trojan horses, viruses and many other unsafe factors in the open Internet, using verification codes to increase the security of authentication has become a common technical path. [0003] Existing verification codes are usually generated by the server and transmitted to the client, the client presents the verification code to the client, the user inputs verification information according to the verification code, and the client returns the verification information to the server. Existing research ...

AI Technical Summary

Problems solved by technology

Due to the long transmission link and the complex network security environment, the content of the verification code and the returned verification information in this simple "present-return" working mode are easy to be tampered with, resulting in service failure, service blocking, etc.

Images