Dynamic password authentication method and system

Abstract

The invention relates to the field of information security, particularly to a dynamic password authentication method. The dynamic password authentication method specifically comprises the following steps: a client side acquires user information and transmits the user information to a server at the same time, the server finds a secret key parameter related only to the user information according to the user information, the server combines the secret key parameter and an algorithm reconstruction mechanism to reconstruct a first algorithm stored in the server to generate a third algorithm, the client side combines the user information to reconstruct a second dynamic password generated by a challenge value and a second algorithm generated by the first algorithm in the server according to the secret key parameter and the algorithm reconstruction mechanism, meanwhile, the second dynamic password is transmitted to the server, the server combines the third algorithm, the user information and the challenge value to generate a first dynamic password, and the server compares the first dynamic password with the second dynamic password to complete the authentication of the dynamic password. The problem of secure storage of a secret key file of the client side is solved effectively, so that the security of an authentication system in the invention is greatly improved.

Description

technical field [0001] The invention relates to the field of information security, in particular to a password authentication method and system based on an algorithm reconstruction mechanism. Background technique [0002] With the development of information technology, the application of information security technology in various fields is more extensive and in-depth. In the field of information security, identity authentication is often the first key used by information systems, and its security has received more and more attention. Correspondingly, the dynamic password technology for enhancing the security of identity authentication has been more and more applied in various fields, especially in the application fields such as online banking, online games, telecom operators, e-government affairs, and enterprise servers. In addition, the application of dynamic passwords in enterprises is also a current hotspot. More and more enterprises or entities use dynamic passwords to ...

AI Technical Summary

Problems solved by technology

[0006] In order to solve the problem that the security performance of the existing dynamic password is not high during the transmission process, the present invention provides a brand new dynamic password authentication method and system to improve the security in the process of using the dynamic password authentication and avoid potential safety hazards

Images