User authentication method and system

Abstract

The invention discloses a user authentication method. The method comprises the following steps: an access server stores a binding relationship between a network address of a client and a user identification after the client finishes internet access authentication; an authentication server obtains the user identification corresponding to the network address of the client from the access server according to the network address of the client obtained by a service side when the client requests a page; the authentication server transmits an authentication user identification to the service side, and the server side generates the page requested by the client according to the authentication user identification. The invention also simultaneously discloses a user authentication system. By adopting the user authentication method and the user authentication system, the security of internet business can be improved when fussy logging of the user and access authentication are reduced.

Description

technical field [0001] The invention relates to authentication technology in the Internet, in particular to a user authentication method and system. Background technique [0002] At present, with the development of the Internet, there are more and more Internet users. Generally, Internet service providers control the access of Internet users through access servers. Specifically, before accessing the Internet, users must enter the user name and password provided by the Internet service provider. Only when the user name and password are correct can they successfully access the Internet. . In this way, it is equivalent to that the user has done an authentication before connecting to the Internet. This authentication not only requires the correct user name and password, but also requires the correct physical line. [0003] With more and more application software and websites on the Internet, each application software and website has its own authentication mechanism. In this wa...

AI Technical Summary

Problems solved by technology

The biggest disadvantage of this solution is: once the domain center site where the Passport server is located is compromised by hackers, it will cause huge losses to the entire system

Similar to Windows Passport and Liberty Alliance: OpenID user passwords are stored in the OpenID website database, once the password is leaked, it will bring huge losses to users

[0008] It can be seen that in the prior art, the single sign-on authentication method is still through registering the user name and password, and uniformly storing the user name and password in a database. Once the database storing these authentication information is compromised, the whole system and users will be bring huge losses

Images