Authentication system used in distributed user service

Abstract

The invention discloses an authentication system used in distributed user service. The system comprises an authentication center, a client, a server and custom made identity authentication devices, wherein the authentication center comprises an encryption storage medium and an encryption chip which are connected mutually; every two of the authentication center, the client and the server are connected, the client and the server are both connected with the custom made identity authentication devices through USB (Universal Serial Bus) ports, the encryption chip of the authentication center is used for processing encryption and decryption requests and generating a key, the encryption storage medium is used for storing the key information of all the custom made identity authentication devices, the identity authentication devices carry out encryption and decryption, and store keys of identity authenticators and keys used in communication, when encryption data communication is performed, two parties in each communication adopt keys to encrypt, the server and the authentication center as well as the client and the authentication center respectively adopt the corresponding keys, and the client and the server adopt a session key newly generated by the authentication center. The system has the advantages of safety and reliability. The hadden danger of data leakage is lowered.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an authentication system for distributed user services. Background technique [0002] With the continuous development of Internet technology, the terminals of each platform began to have operating systems with stronger performance and richer interfaces, and computing resources began to be abundant. On this basis, the security requirements for the platforms began to gradually increase. Information security mainly includes two aspects: system security and data security. System security generally adopts measures such as firewall, anti-virus and other security technologies, which are passive security measures. Data security mainly uses modern cryptographic technology to actively protect data, such as data confidentiality, data integrity, identity authentication and other technologies. [0003] Digital signature technology is a digital string that can only be generated ...

AI Technical Summary

Problems solved by technology

At present, data and key information are transmitted on the network in the form of plain text or simple encryption, which brings great hidden dangers of data leakage and low information security.

Images