A SMS-based authentication method, system and device

Abstract

The invention discloses a short-message-based authentication method, a short-message-based authentication system and a short-message-based authentication device, which relate to the technical field of network security. The authentication system comprises a server, a client and a mobile phone. The authentication device which is the server comprises a transmitting and receiving module, a storage module, a counting module, a judgment module, a generation module, an authentication module, a control module and a calculation module. In the short-message authentication method, the server generates an authentication code, records authentication code generation time, and transmits the generated authentication code to the mobile phone of a user in an out-of-band way; the user inputs the authentication code into the client; and the client transmits the authentication code to the server for authentication, so man-in-the-middle attacks can be prevented to a certain extent; moreover, the authentication code generated by the server has timeliness and may become invalid upon expiration.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method, system and device for authentication based on short messages. Background technique [0002] At present, when the user uses the software or application program provided by the server with permission requirements through the client, the server usually requires the user to input the corresponding password and account information through the client to prevent the entry of illegal users, but in a network where hacker software is prevalent Under the circumstance, user passwords are often stolen. Therefore, the rights and interests of legitimate users to use software or application programs provided by the server with permission requirements are seriously infringed. [0003] Commonly used authentication technologies in the prior art include: static password authentication technology, which uses the user's account name and password to authenticate and identify the legi...

AI Technical Summary

Problems solved by technology

[0002] At present, when a user uses the software or application program provided by the server with permission through the client, the server usually requires the user to enter the corresponding password and account information through the client to prevent illegal users from entering, but in a network where hacker software is prevalent In this environment, user passwords are often stolen, which seriously infringes the rights of legitimate users to use software or applications with permission requirements provided by the server.

[0003] Commonly used identity verification technologies in the prior art include: static password authentication technology, which uses the user's account name and password to authenticate and identify the legitimacy of the user. Its main feature is to activate a specific account with a fixed password, but due to Passwords and account numbers are soft identifiers, static and unchanged, and they are transmitted in the network. There are many disadvantages and security holes. The cracking technology for it is constantly developing, and many tools and methods can be used to steal account passwords, such as stealing , deciphering, peeping, cheating, etc. In addition, there are high requirements for users to create, remember, and modify passwords. If the password setting is too simple and easy to crack, if it is too complicated, it will be easily forgotten

Images