Method and system for processing network service by utilizing multifactor authentication method

Abstract

The invention discloses a method and a system for processing network service by utilizing a multifactor authentication method. The method comprises the following steps that a service operation terminal sends a service operation request to a service server; after receiving the service operation request, the service server carries out local authentication; after authentication is successful, a safety authentication request is submitted to a safety platform server; after receiving the authentication request, the safety platform processes the authentication request and then sends data to a mobile terminal corresponding to a user; after receiving data, the mobile terminal calculates the data and displays the data in a clear text for the user; the user inputs and confirms a response number on the service operation terminal; the service operation terminal sends the response number to the service server; the service server sends the response number to the safety platform server; after receiving the response number, the safety platform server authenticates the response number and feeds back the authentication result to the service server; and the service server receives the feedback authentication result and carries out service processing according to the result. According to the scheme disclosed by the invention, the network service processing is safer.

Description

technical field [0001] The invention relates to the field of network business processing, in particular to a business processing method and system with a multi-factor authentication method. Background technique [0002] At present, the communication network covers the whole world, and the use of network processing business is also developing rapidly, especially the use of network transactions and network payment activities. In the increasingly frequent network transaction payment, an identity authentication process must be provided to ensure the security of transactions. Common There are several methods of identity authentication: 1. Static password authentication; this authentication method is single-factor authentication, usually enter a set of passwords, try to use a mixture of letters and numbers to improve password strength, resist dictionary attacks, and Password strength can be increased by limiting the number of errors. However, the security level of this password ...

AI Technical Summary

Problems solved by technology

However, the level of security of this password is not enough, and it is easy to be guessed. The commonly used attack methods are dictionary attack and peeping.

2. Password card verification, the principle is to preset a password on the card, and find out the corresponding password according to the given row number and column number, which belongs to two-factor authentication. Less, easy to be exhausted and copied, unable to defend against man-in-the-middle attacks, limited resistance to dictionary attacks, commonly used attack methods include copying, peeping and dictionary attacks

3. Dynamic password verification; this verification method is a two-factor verification based on time series or event sequences. The result of Token (token) participates in business transactions, and the built-in key of Token is calculated by HASH or other iterative algorithms. The result cannot be predicted externally, but Its security level is still low, it belongs to one-way authentication, and the Token holder cannot verify the server side, and cannot prevent man-in-the-middle / phishing website attacks. The common attack method is phishing website

Specifically, you can refer to the Chinese patent document with the publication number CN101770619A; the above-mentioned authentication methods all have the shortcomings of too few authentication factors and the authentication means are easily attacked

Images