Dynamic two-dimension code token and authentication method of dynamic two-dimension code instruction

Abstract

Disclosed is an authentication method of a dynamic two-dimension code instruction. A dynamic two-dimension code token comprises a collection module, a display module, an authentication module, an instruction module, a management module, a two-dimension code module and a control module. The control module, the management module, the authentication module, the instruction module and the two-dimension code module are integrated in the same microprocessor. The collection module is connected with the control module and the two-dimension code module. The display module is connected with the control module and the two-dimension code module. An authentication system of the dynamic two-dimension code instruction is the integration of service programs for carrying out the functions of authentication of the dynamic two-dimension code instruction, token synchronization, and management and configuration of relevant states of the token. The dynamic two-dimension code instruction has the characteristics of preventing exposure, being high in intensity, unpredictable, resistant to replay and disavowal, free of memory, accurate and efficient, and having physical isolation and bidirectional authentication, and safety of identity authentication is improved remarkably.

Description

technical field [0001] The invention belongs to the field of information security, relates to two-dimensional code technology and dynamic token technology, in particular to a dynamic two-dimensional code token and a dynamic two-dimensional code password authentication method. Background technique [0002] With the advent of the information age, people rely more and more on information systems, and people pay more and more attention to the security of information systems. [0003] Passwords have the highest security requirements in information systems. Once passwords are stolen or lost, information systems may be accessed without authorization, resulting in direct economic losses and indirect reputation losses. The losses are huge and even fatal. [0004] According to a survey of thousands of system administrators conducted by a security association in the United States, passwords are the first thing most information systems are attacked and broken through. [0005] The pass...

AI Technical Summary

Problems solved by technology

In the network environment, the proliferation of hackers, Trojan horses and viruses makes static passwords more vulnerable

In addition, static passwords also have the following security risks and defects:

[0007]1) The user's password may be peeped or recorded by the image acquisition device when entering the password

[0008]2) The user's password usually has certain regularity and short length, which is easy to be guessed and cracked by monitoring;

[0009]3) The user's password is fixed for a relatively long period of time and may be leaked

[0010]4) The user's password does not contain non-repudiation information and may be manipulated maliciously

[0011]5) For some reason, the user tells others the password and forgets to modify it afterwards, resulting in loss

[0013]7) The user's password is manually entered, and entry errors may occur

[0015]9) Information asymmetry between the server and the client makes it vulnerable to phishing attacks

Images