A network digital identity authentication method based on gene certificate

Abstract

The invention relates to a gene certificate-based network digital identity authentication method. The method adopts a B / S (Browser / Server) structure and comprises a gene certificate server, an identity authentication server and a corresponding management system. The method is as follows; at first, an operator submits the registration information including user name, description, IP, sub network mask, MAC (Media Access Control), and ID number or equipment number and the like to the gene certificate server; the gene certificate server designates gene and digital signature for the network or the equipment after successful calibration so as to generate unique and unbreakable gene certificate; and the identity authentication server detects the consistency of the physical identity and digital identity of the operator according to the matching between the signature information on the gene certificate and the gene site number, before the operator accesses an application system. The method has the characteristics of high accuracy and good safety, solves the problems that the password is easy to forget, hard to remember and not safe, avoids the defect that a traditional digital certificate main information is not clear, and overcomes the shortcoming that the biometric authentication technology can not identify the equipment identity.

Description

technical field [0001] The invention relates to a network security technology for identity authentication, in particular to a network digital identity authentication method based on gene certificates. Background technique [0002] In an information system, the identity information of network users and network equipment is represented by a specific set of data. In a computer network, correctly identifying the digital identities of users and devices and ensuring that the physical identities of operators correspond to their digital identities is the first barrier to ensure the security of information systems. At present, the digital identity authentication technology in the computer network is divided into two situations: the authentication between the user and the host, and the authentication between the host and the host. However, the pros and cons of existing digital identity authentication technologies are outlined below: [0003] (1) Digital identity authentication techn...

AI Technical Summary

Problems solved by technology

[0003] (1) Digital identity authentication technology based on static passwords is simple to implement and widely used, but it can only be used for authentication between users and hosts, and short passwords are easy to guess, long passwords are difficult to remember, plaintext passwords are easy to be intercepted, and ciphertext passwords are easy to be intercepted. Passwords are vulnerable to dictionary attacks, etc.

[0004] (2) The digital identity authentication technology based on dynamic password solves the problem that the password is easy to be guessed and reused after interception, but this technology is only used for authentication between the user and the host, and it is difficult to synchronize the time of the client and the server

[0005] (3) The digital identity authentication technology based on smart cards (such as IC cards) overcomes the shortcomings of passwords that are difficult to remember and save, but this technology is only used for authentication between users and hosts, and there are fraudulent uses and it is difficult to prevent memory scanning and network monitoring attacks

However, there are defects such as unclear subject information of the certificate (difficult to distinguish network users with the same name in reality), large amount of calculation, low efficiency, difficult key management, complex system implementation, and high cost of use and maintenance.

[0007] (5) Digital identity authentication technology based on biometrics (such as fingerprints, voice, retina, gait, etc.) uses the unique physiological or behavioral characteristics of the human body to identify the user's identity, but there are users with physical injuries, serious stains, special groups (people with many calluses) laborers) and other situations that are difficult to identify, and this technology cannot be used for host-to-host authentication

Patent Publication Nos. CN1674499 and CN1674500 apply to identify the user's digital identity by fingerprinting, but these two methods cannot be used for authentication between hosts

The applications with patent publication numbers CN1564511 and CN1614924 proposed identity authentication methods based on dynamic passwords, which solved the problem of unsafe transmission of passwords in plain text, but they are only used in wireless mobile networks

The applications with patent publication numbers CN1444169 and CN1545243 belong to the identity authentication technology based on digital certificates, which have defects such as unclear subject information of certificates, large amount of calculation, low efficiency, difficult key management, complex system implementation, and high cost of use and maintenance.

Images