Method adopting static passwords as source to generate dynamic passwords

Abstract

The invention discloses a method adopting static passwords as a source to generate dynamic passwords. The method comprises the following steps that: S1, a server end stores static passwords and index codes; S2, the server end randomly generates an intermediate password mapping relation set when the server end receives a password input request from a user end every time, wherein the index codes are used for designating one piece of relation of the intermediate password mapping relation set as intermediate passwords which is used by current password inputting, and the server end generates dynamic passwords according to a dynamic password mapping relation between the intermediate passwords and an input keyboard; S3, the server end displays the intermediate password mapping relation set on an operation interface of the user end so as to prompt the user to use the index codes to find middle passwords and to obtain dynamic passwords through using the dynamic password mapping relation between the intermediate passwords and the input keyboard; and S4, the user end transmits the dynamic passwords inputted by the user to the server end, and the server end verifies whether the dynamic passwords inputted by the user are consistent with the dynamic passwords generated in the S2. The method adopting the static passwords as the source to generate the dynamic passwords of the invention can improve the protection for the static passwords.

Description

technical field [0001] The invention relates to a dynamic password method, in particular to a method for generating a dynamic password from a static password. Background technique [0002] At present, the password input method in many fields such as finance and the Internet still uses static password as the main identity verification method, and static password input is used as identity verification alone, which has the following defects: [0003] 1. Easy to be stolen: Since the input of the static password is directly typed by the user on the keyboard by pressing the corresponding number or letter, the third person can obtain the password only by recording or watching the input process of the password, and the password can be obtained by viewing it once. It is possible to steal all the information of the password, therefore, the static password is easy to be stolen by others all at once. [0004] 2. Easier to be deciphered: Even if you can only observe the process of enter...

AI Technical Summary

Problems solved by technology

[0003] 1. Easy to be stolen: Since the input of the static password is directly typed by the user on the keyboard by pressing the corresponding number or letter, the third person can obtain the password only by recording or watching the input process of the password, and the password can be obtained by viewing it once. It is possible to steal all the information of the password, therefore, the static password is easy to be stolen by others at once

[0008] First, the dynamic verification code requires additional equipment to receive or generate it, and there is a risk that the dynamic verification code will be intercepted or the special algorithm for generating the dynamic verification code will be cracked;

[0009] Second, the user's static password is separate from the existing dynamic password and needs to be entered into the client together with the dynamic verification code, which cannot achieve the purpose of protecting the user's original static password from being peeped by others. To add a layer of protection for identity verification, the risk of static passwords being stolen has not been reduced

Images