Multi-communication channel authentication and authorization platform system and method

Abstract

The invention discloses a multi-communication-channel authentication authorization platform system and method. The system comprises a token generating server STPM, a registration server TIM, an authentication server TAM and an authorization terminal TAD, wherein the token generating server STPM generates a token combination and provides the same to the registration server; the registration server feeds the token combination back to the authorization terminal and the authentication server; the authentication server performs authentication authorization when receiving an authorization authentication request of the authorization terminal. The multi-communication-channel authentication authorization platform system is safe, convenient, easy to operate, low in cost, and capable of preventing various malicious attacks during network authentication authorization.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a multi-communication channel authentication and authorization platform system and method. Background technique [0002] In the process of electronic authentication and authorization, the program will generate electronic data, and the user can read the data through certain access channels, such as the user's computer, telephone, IVR (Interactive Voice Response, interactive voice response), information station (Kiosk), etc. , user information must be authenticated and authorized before using these access channels to obtain and generate electronic data. For some electronic data with relatively high confidentiality, the user's electronic transactions will be required to use digital signatures during authentication and authorization to ensure the authenticity and reliability of transactions. For example, through the signature solution, use a single device platform, such as ...

AI Technical Summary

Problems solved by technology

[0008] 3) For offline signing devices, although it provides a more secure authentication and authorization solution, offline signing devices only support a single service provider, and generally require users to manually input important data to customers end

This process is error-prone; there may be limits to the amount of data that can be included in a signature, and there may be limits to the data being signed

In addition, the cost of this kind of signing equipment is relatively high in the whole process of manufacturing, purchasing, distributing and revoking

At the same time, if the authentication authorization involves one or more authentication authorizations, the authentication authorization process will become complicated and take more time

Images