Bidirectional identity authentication method based on dynamic password and biologic features under cloud environment

Abstract

The invention discloses a bidirectional identity authentication method based on dynamic password and biologic features under cloud environment, wherein a plurality of authentication methods and encryption technologies are comprehensively used, a one-time random key is obtained by receiving messages, the bidirectional authentication is realized, a user can login anywhere, finish registration process on net, and has no need to register information at designated location. According to the bidirectional identity authentication method based on dynamic password and biologic features under cloud environment, the one-time dynamic password is combined with the biological features, secret key is transmitted to GSM (Global System for Mobile Communication), and accordingly, security and reliability of authentication process are enhanced.

Description

technical field [0001] The invention relates to the field of cloud computing security, in particular to a two-way identity authentication method based on a dynamic password and biometric features in a cloud environment. Background technique [0002] With the continuous development and progress of science and technology, the emerging technology and concept of "cloud" is getting closer and closer to the lives of ordinary people. "Cloud computing" and "cloud storage" are important applications of "cloud" technology, and The virtualization and distributed characteristics of "cloud" itself make "cloud security" a matter of particular concern to all walks of life. Identity authentication is the foundation of the entire cloud security system, through which corresponding access control can be carried out, and it is the first security barrier of the "cloud". [0003] Currently commonly used identity authentication methods and their disadvantages in actual use are as follows: [000...

AI Technical Summary

Problems solved by technology

However, summing up several network identity authentication schemes combined with fingerprint recognition that have been proposed so far, there are mainly one or more of the following deficiencies: 1. The registration process cannot be completed on the Internet by itself, and information needs to be entered at a designated location; 2. It cannot Realize two-way authentication of server and user identity; 3. A public / private key pair will be generated for the user, and the user needs to use an additional smart card with the user's private key to log in, or only in a few specific clients that store the user's private key log in

The former increases the inconvenience of using smart cards, while the latter restricts user login locations and is not suitable for cloud application environments; 4. The key distribution interaction only relies on Ethernet for transmission, and the risk of being eavesdropped and leaked increases

Images