An implementation method of multi-SP security binding based on local authentication of smart terminals

Abstract

The invention relates to a multi-SP safety binding implementation method based on intelligent terminal local authentication. A trust presetting idea is introduced, public and private key certificates of an authentication device are preset, and the authentication device is bound with an identify authentication terminal. A user logs into SPs, a user public and private key UAuth for marking the authentication device is generated, and the UAuth is bound with a user account. A one-to-many bidirectional association is carried out on the safety authentication device held by the user and multiple accounts of the user in the same SP or accounts in multiple different SPs. By means of the multi-SP safety binding implementation method, a large amount of identify authentication can be successfully carried out through the unique safety device by the user, and a traditional user name password identify authentication mode is replaced to a great degree. In addition, under the condition that the convenient user identity authentication operation is guaranteed, the information safety in the authentication process is greatly improved.

Description

technical field [0001] The invention belongs to the field of identity authentication in the field of information security, and in particular relates to a method for realizing multi-SP security binding based on local authentication of intelligent terminals. Background technique [0002] With the development of the network and the popularization of the Internet (networking of desktop services), the diversification of Internet services and the personalization of user customization make almost all Internet service providers require users to first register their identity before providing corresponding services. However, the traditional identity registration and verification method (that is, the verification method of user name and password) has many security problems such as password leakage or eavesdropping, and it will cause trouble for users because of the large number of memory difficulties. With the development of biometric technology and graphic image recognition technology...

AI Technical Summary

Problems solved by technology

[0003] This transformation also faces some difficult problems: First, how to enable users to use the new identity verification method to log in to their accounts in a short period of time without causing damage to existing user data

[0004] Second, the explosive development of identity authentication equipment has caused a problem of numerous types of equipment and different standards. At present, there is no unified standard to specify the authentication equipment entity that can be used for identity authentication. Users can only refer to Provider) to select the authentication device, not only the security of the authentication device cannot be guaranteed, but also the user needs to prepare an authentication device for each service provider it needs, and the correspondence and storage of the authentication device is given to the user. poses a new problem

Images