A dynamic two-dimensional code token and dynamic two-dimensional code password authentication method

Abstract

A dynamic two-dimensional code password authentication method, wherein the dynamic two-dimensional code token includes an acquisition module, a display module, an authentication module, a password module, a management module, a two-dimensional code module, and a control module; the control module, the management module, The authentication module, the password module and the two-dimensional code module are integrated in the same microprocessor; the acquisition module is connected with the control module and the two-dimensional code module; the display module is connected with the control module and the two-dimensional code module. The dynamic two-dimensional code password authentication system is a collection of service programs for performing dynamic two-dimensional code password authentication, token synchronization, and management and configuration of token-related states. The present invention is a dynamic two-dimensional code password with anti-exposure, high-strength, unpredictable, anti-replay, anti-repudiation, memory-free, accurate, efficient, physical isolation and two-way authentication characteristics, which significantly improves the security of identity authentication.

Description

technical field [0001] The invention belongs to the field of information security, relates to two-dimensional code technology and dynamic token technology, in particular to a dynamic two-dimensional code token and a dynamic two-dimensional code password authentication method. Background technique [0002] With the advent of the information age, people rely more and more on information systems, and people pay more and more attention to the security of information systems. [0003] Passwords have the highest security requirements in information systems. Once passwords are stolen or lost, information systems may be accessed without authorization, resulting in direct economic losses and indirect reputation losses. The losses are huge and even fatal. [0004] According to a survey of thousands of system administrators conducted by a security association in the United States, passwords are the first thing most information systems are attacked and broken through. [0005] The pass...

AI Technical Summary

Problems solved by technology

[0007] 1) The user's password may be peeped or recorded by the image acquisition device during entry

[0008] 2) The user's password usually has certain regularity and short length, which is easy to be guessed and cracked by monitoring;

[0009] 3) The user's password is fixed for a relatively long period of time and may be leaked

[0010] 4) The user's password does not contain non-repudiation information and may be maliciously manipulated

[0011] 5) For some reason, the user tells others the password, and forgets to modify it afterwards, resulting in loss

[0012] 6) User forgets password

[0013] 7) The user's password is manually entered, and entry errors may occur

[0014] 8) The user's password cannot be automatically recognized, and the input efficiency is low

[0015] 9) Information asymmetry between the server and the client makes it vulnerable to phishing attacks

Images