Safety authentication mechanism of remote password

Abstract

The invention discloses a safety password authentication method which can be used in user password authentication of a C / S or B / S mode. According to the password authentication method, single-character input and multiple Hash modes are adopted. Meanwhile, by combining validate codes and a local prospective validation mechanism, authentication safety is greatly guaranteed, and present user experience is not changed for users.

Description

technical field [0001] The invention relates to identity authentication technology, in particular to a security authentication method for remote passwords in a distributed processing environment and a server and a terminal for realizing the method. Background technique [0002] Identity authentication technology is an important part of the information security system, which verifies the legitimacy and authenticity of the user's identity in the information system, thus providing a basis for granting user access rights. The judgment of the consistency between the visitor's physical identity and digital identity can be based on passwords, tokens or biological characteristics, among which the method based on passwords is the most commonly used. [0003] In the password-based method, when a user logs in to the system, he needs to enter a user name (also called a user account) and a corresponding password. In order to prevent the use of dictionary files to brute force password cr...

AI Technical Summary

Problems solved by technology

For example, when a user enters a password, the password is generally stored in the memory in plain text, so it may be stolen by malware pre-embedded in the terminal and sent to a remote illegal user

Images