Method for synchronizing time of dynamic token

Abstract

The invention discloses a method for synchronizing time of a dynamic token. The method comprises that steps that a client side sends out a time synchronization request of the dynamic token to a dynamic token authentication server, wherein identification information of the dynamic token or the identification information of a user of the dynamic token is carried in the time synchronization request; the dynamic token authentication server searches for a seed secret key corresponding to the dynamic token in a database of the dynamic token authentication server according to the identification information of the dynamic token or the identification information of the user of the dynamic token in the time synchronization request, the dynamic token authentication server calculates verification information according to the found seed secret key and the current time of the dynamic token authentication server and by using a message verification algorithm, and the verification information obtained by the dynamic token authentication server through calculation and the current time of the dynamic token authentication server are packaged to generate response information. The method for synchronizing the time of the dynamic token can solve the technical problems that after clock drift happened to the existing dynamic token, the dynamic token needs to be sent back to a factory or a server end to be handled, and the service life of the dynamic token and user experience are influenced.

Description

technical field [0001] The invention belongs to the technical field of security authentication, and more specifically relates to a method for synchronizing the time of a dynamic token. Background technique [0002] With the rapid development of application systems such as e-government and e-commerce, dynamic cryptography is an effective way to replace static cryptography. Due to its ease of use and ability to enhance security, dynamic cryptography has been widely used. [0003] A dynamic password is a one-time password, and each password can only be used once, and it changes continuously with time or the number of times of use. A dynamic token is an electronic terminal device used to generate a dynamic password. The device has a built-in processing chip, a display screen, and some devices have a key device. A dynamic token uses a seed key to generate a dynamic password based on the current time or the value of an event counter. The seed key is used to encrypt or HMAC the i...

AI Technical Summary

Problems solved by technology

[0005] In view of the above defects or improvement needs of the prior art, the present invention provides a method for synchronizing the time of the dynamic token, and its purpose is to solve the problem that the existing dynamic token needs to be returned to the factory or sent back to the server Technical issues that affect the service life of dynamic tokens and user experience

Images