Method for realizing digital signing authentication by data interaction of audio-frequency port of mobile terminal

Abstract

The invention relates to the technical field of information security, in particular to a method for realizing digital signing authentication by data interaction of an audio-frequency port of a mobile terminal. The method comprises the following steps of: receiving a network identity authentication request initiated by a terminal user in a client-side manner; sending authentication information to the mobile terminal of the terminal user and simultaneously sending same authentication information to a client side of the terminal user; comparing and judging whether the authentication information received by the client side is consistent to the authentication information received by the mobile terminal; if so, calling a private key stored by an external device by the audio-frequency port of the mobile terminal to carry out signing on the authentication information and sending a signing result to a service system; and receiving the signing result and verifying the signing result by the service system, and allowing the terminal user to carry out next-step service processing if the verification is successful. The method provided by the invention is based on the digital certificate technology, and has the advantages that the identity authentication problem of the mobile internet era is solved, the security coefficient is high and the benefit of all entities in the network is protected.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for realizing digital signature authentication through data exchange through the audio port of a mobile terminal. Background technique [0002] At present, in order to ensure the security of information exchange, a cryptographic device is usually used to encrypt the information exchange. The common identity authentication methods include: user name / password, dynamic password or digital certificate. The security and ease of use of the above-mentioned types of identity authentication are different. Among them, the security of user name / password and dynamic password is poor, and dynamic password is often faced with the problem of man-in-the-middle attack; relatively speaking, the security factor of the digital certificate solution is the highest, and its use in conjunction with Ukey is a big problem at this stage. Some users adopt the method, but this method i...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is to provide a method for realizing digital signature authentication through the data exchange of the audio port of the mobile terminal, so as to overcome the defects of low data exchange security and high requirements on the client in the prior art

Images