Online bank identity authentication method and apparatus thereof

Abstract

An online bank identity authentication method and an apparatus thereof are disclosed. The method comprises the following steps: setting an apparatus, wherein the apparatus comprises a processor, an interface connected with the processor and a keyboard; inputting an authorization code via the keyboard, wherein after the authorization code is verified to be qualified, the processor carries out digital signature processing on external equipment via data provided by the interface and the processed data is returned to the external equipment via the interface. Through inputting the authorization code and an account password on the apparatus which is independent of an online bank client, the authorization code and the account password can be ensured not to be stolen so as to effectively guarantee safety of an identity authentication process.

Description

technical field [0001] The invention relates to a network bank, in particular to the realization of identity online authentication in the network bank. Background technique [0002] With the rapid development of the Internet and e-commerce, the amount of online transactions in online banking (hereinafter referred to as online banking) continues to increase, and the problem of network information security has become increasingly prominent. Consumers are paying more and more attention to the security of online banking. In order to ensure the security of online banking, identity authentication technology is required for online banking operations. [0003] At present, there are two widely used identity authentication hardware products that can realize relatively secure online banking system login, namely dynamic password lock and USB Key. [0004] Dynamic password (Dynamic Password) is also called one-time password, which means that the user's password is constantly changing dy...

AI Technical Summary

Problems solved by technology

[0012] To sum up, in the existing identity authentication method, since the user enters the authorization code and account password on the online banking client 2, and then the online banking client 2 sends it to the identity authentication device 1, the authorization code and / or account password will be displayed in plain text Appears on the keyboard and in the memory of the online banking client 2 in a way, and the online banking client 2 is a part of the open network environment, it is easy for an attacker to attack it, intercept the authorization code and / or account password, and complete the forged signature. trade

Images