Digital signature authentication method and device

Abstract

The invention provides a digital signature authentication method and device. The method comprises the steps of receiving user private key protective factors, generating safety certificate information when the fact that the received user private key protective factors are identical with preset user private key protective factors is judged, collecting user public key data, and generating authentication results according to the safety certificate information and the public key data. According to the digital signature authentication method, a multi-factor digital authentication scheme is provided, according to a public key cryptosystem theoretical principle and characteristics of specific application, existing double factors are extended to three or more factors, the number and the level of factors are given full play, and highest safety intensity is achieved.

Description

technical field [0001] The invention relates to communication technology, in particular to a digital signature authentication method and device. Background technique [0002] The public-key cryptosystem uses mathematical methods to theoretically enable both communication parties to meet the security requirements for authentication. In applications where the authentication parameters are initially placed in the browser, their security depends on the single factor of who knows the certificate password. In the prior art, the USBKey is used as the authentication medium, and the authentication parameter information is protected by entering and checking the PIN code, which reaches the level of two-factor authentication. For example, banks generally regard this two-factor authentication as the safest option and grant the largest payment amount. [0003] In the USBKey authentication method in the prior art, the private key cannot be exported in the medium, and the signature is per...

AI Technical Summary

Problems solved by technology

However, this method has the following disadvantages: (1) Its basic security depends on who gets the USBKey and who knows the PIN code. Once the USBKey is lost and the PIN code is relatively simple, the safety of customer funds only depends on Complexity of payment channel login passwords

(2) Although the bank has added supplementary methods such as SMS confirmation, these supplements are plug-in and non-digital authentication methods, and cannot be integrated with the digital signature made by the existing USBKey device

Images