Method and system for protecting account, preventing order from being tampered and preventing fishing attack based on graphical two-dimensional code

Abstract

The invention discloses a method and a system for protecting an account, preventing an order from being tampered and preventing a fishing attack based on a graphical two-dimensional code. Double-link data is used for authentication; and two links comprises a first link for authentication from a personal computer (PC) client to a user name and a static password of an application server, and a second link for authentication through an authentication service from the client based on a mobile terminal to the application server. The system comprises the mobile terminal, the PC client, the application server, an authentication system server and an authentication system disaster backup server. The invention has the advantages that: authentication is performed on the application server by being combined with the graphical two-dimensional code information of the mobile terminal and the application server according to the double-link data of information transmitted between the application server and the mobile terminal, so that a brand new effective solution is provided for preventing the fishing attack, preventing the order from being tampered and preventing a number from being stolen; the network security is improved greatly; and the invention has relatively high practical value and practical significance.

Description

technical field [0001] The invention relates to a method and system for protecting accounts based on graphic two-dimensional codes, preventing order tampering and phishing attacks, and belongs to the technical field of network communication. Background technique [0002] With the rapid development of information technology, especially the maturity of wireless communication and network communication technology, more and more enterprises have changed the previous way of operating business systems in isolation on the internal LAN of the enterprise and put them on the Internet. Internet applications have made great strides. However, the resulting problems of information sharing and information protection have become increasingly prominent, and network security and crime have restricted the prospect of Internet applications for a long time to a certain extent. Common network security issues include tampering with user order information, stealing accounts, and phishing attacks. A...

AI Technical Summary

Problems solved by technology

At present, most Internet applications adopt the traditional user name plus static password authentication method. The account information in this way is very easy to be stolen, and the corresponding user order information is also easy to be tampered with. At the same time, the authentication method based on user name and static password It is easy to be attacked by phishing. If the dynamic password method is used, there is also the risk of being phished

At present, the various methods adopted to prevent phishing attacks, prevent order tampering, and prevent account theft have obvious technical deficiencies

Images