One-time password certification system token resynchronization method based on event

Abstract

A one-time password certification system token resynchronization method based on an event aims to solve the problems of step out of the token due to inconsistency of counter values of a hardware token and an authentication server of the one-time password certification system based on the event and provides a resynchronization method. The method is divided into window inner resynchronization and window outer resynchronization on basis of a preset size of the window and the counter values as synchronization factors. When step out times of the hardware token and the server are within the size of the window, the window inner resynchronization is carried out, repetitive computation command times are smaller than or equal to the window size, and a group of consistent customer commands and service commands, and the resynchronization is achieved; if not, the widow outer resynchronization is carried out, at the moment if three customer commands and service commands are consistent continuously, the resynchronization is achieved, the whole execution process of the resynchronization method is divided into seven steps. The one-time password certification system token resynchronization method based on the event is highly-efficient, simple in computation, low in time consumption of operation, fast in operation speed, small in occupation space of system memory space, and capable of resisting brute force impact of the certification system.

Description

(1) Technical field [0001] The invention relates to Internet security identity authentication technology, in particular to an event-based token resynchronization method when a hardware token and an authentication server are out of sync in a one-time password authentication system. It belongs to the technical field of computer and information security. (2) Technical background [0002] The one-time password authentication technology provides randomly generated and different authentication passwords for users during identity authentication, which solves the danger of traditional static passwords being easily stolen. One-time password authentication has been more and more widely used in e-commerce, online games, online banking and other network platforms that require identity authentication. [0003] Most of the existing various one-time password authentication technologies and schemes provide hardware tokens and authentication servers, and the hardware tokens are used to rand...

AI Technical Summary

Problems solved by technology

Generally, in the hardware token, if the user clicks the button once, the counter value will be incremented by one; in the authentication server, if the authentication is successful once, the counter value will be incremented by one. If the user keeps clicking the button on the hardware token without performing the authentication operation , it will cause the counter value in the hardware token to increase continuously, while the counter value in the authentication server remains unchanged, making the two out of sync

Images