Mobile-terminal-based identity authentication system and method

Abstract

The invention provides a mobile-terminal-based identity authentication method and a mobile-terminal-based identity authentication system. The method comprises the following steps of: (1) acquiring an initial password for the login of a self-service server; (2) logging in the self-service server to acquire an initializing sequence number of a mobile client by a user; (3) initializing the mobile client; and (4) performing identity authentication, namely a user makes a login application to a third party application server, a mobile terminal makes an authentication request to an authentication server, and the third party application server returns an authentication result to the user after obtaining a mobile terminal authentication result from the authentication server, wherein the authentication request made by the mobile terminal to the authentication server comprises dynamic password authentication and position information authentication. Hardware equipment is replaced by a software client, so that the production cost of hardware is saved; and by a dynamic factor (a time factor or an event factor) between the software client and the authentication server, synchronization can be conveniently realized, and integration with a third party application system is facilitated, so that limitation and shortcomings caused by the use of the hardware equipment to the whole authentication system are completely overcome.

Description

technical field [0001] The invention relates to a technology combining wireless communication, network communication, algorithm security and network security, specifically a security system and method for generating a dynamic password on a trusted mobile terminal and using the password to realize strong identity authentication. Background technique [0002] With the rapid development of the Internet, more and more application systems are running on the public network, network security issues have become increasingly prominent, and identity authentication for sensitive operation portals has become extremely important. At present, most application systems still use the identity authentication method of user name plus static password. This authentication method has many security risks, such as: static passwords are easy to be guessed and cracked, static passwords are intercepted by hackers, and static passwords are stolen by administrators. Illegal use, defrauded by phishing we...

AI Technical Summary

Problems solved by technology

However, the use of hardware devices for users to obtain dynamic passwords has certain defects: high cost, inability to communicate, inability to solve the synchronization of dynamic factors with the authentication server, and inability to provide users with rich operating experience and business functions

Images