Identity authentication method for security information interaction

Abstract

The invention provides an identity authentication method for security information interaction. The method comprises the following steps: a user acquiring security equipment containing a security chip from a service provider and executing an initialization operation to activate the security equipment; the user initiating and finishing the security information interaction process in virtue of the activated security equipment. The identity authentication method for security information interaction disclosed by the invention is high in security and convenient for use.

Description

technical field [0001] The present invention relates to an identity authentication method, and more particularly, to an identity authentication method for security information interaction. Background technique [0002] At present, with the increasingly wide application of computers and networks and the increasing variety of business types in different fields, it is used for security information interaction (that is, information interaction with high security requirements, such as remote payment transaction processing in the financial field) Authentication methods are becoming more and more important. [0003] For the Internet-based remote security information interaction process, the existing technical solutions usually use the following two methods for user identity authentication: (1) The user uses a specific hardware security device (such as a USB key) issued by a service provider (such as a bank); , OTP token, etc.); (2) The user pre-connects the information associated ...

AI Technical Summary

Problems solved by technology

[0004] However, the above existing technical solutions have the following problems: (1) For the first method, due to the need to use a specific hardware security device, the convenience and versatility are poor; (2) For the second method, due to the need The user's sensitive information (such as card number) is stored at the gateway of the service provider, and the SMS verification code has the risk of being intercepted and maliciously stolen by a Trojan horse, so the security is low.

Images