A two-factor authentication method based on Chinese character format information

Abstract

The invention discloses a two-factor identity authentication method based on Chinese character format information. The two-factor identity authentication method comprises the steps that a user inputs simplified Chinese characters into a manual tablet; Chinese character recognition is conducted on the simplified Chinese characters through the manual tablet based on the Chinese character skeleton recognition algorithm, so that binary coding information is generated; encryption is conducted on the binary coding information through the SM3 encryption algorithm based on a time factor, so that a number-format challenge is generated; the user inputs the number-format challenge into a hardware token manually; encryption conversion is conducted on the number-format challenge through the hardware token by means of the SM3 algorithm based on the time factor, so that a dynamic password is obtained; the user inputs the dynamic password into an identity authentication server, and the identity authentication server authenticates the identity of the user according to the dynamic password. According to the two-factor identity authentication method based on the Chinese character format information, the challenge of two-factor identity authentication is generated based on the absoluteness and the uniqueness of the Chinese character format information, and therefore it is guaranteed that the challenge is not prone to being influenced by single parameters such as time.

Description

technical field

[0001] The invention relates to the field of electronic authentication, in particular to a two-factor identity authentication method based on Chinese character format information. Background technique

[0002] With the development of e-commerce and the advancement of mobile terminal technology, people use mobile terminals more and more frequently for online consumption, and electronic payment has become one of the main means of payment for people. While electronic payment brings convenience to consumers, it also raises new issues for payment security. How to improve the reliability of electronic authentication is a technical problem that many electronic security technology development companies urgently need to solve. The use of dynamic passwords for user identity verification is a commonly used authentication method in electronic payment. There are time synchronization, event synchronization and challenge-response modes for the use of dynamic passwords. Th...

Images