Identity authentication method for security information exchange

Abstract

The present invention proposes an identity authentication method for security information interaction, which includes the following steps: the user acquires a security device containing a security chip from a service provider and performs an initialization operation to activate the security device; the user uses the security chip to activate the security device; The activated security device initiates and completes the security information exchange process. The identity authentication method for security information interaction disclosed by the invention has high security and is convenient to use.

Description

technical field [0001] The present invention relates to an identity authentication method, and more particularly, to an identity authentication method for security information interaction. Background technique [0002] At present, with the increasingly wide application of computers and networks and the increasing variety of business types in different fields, it is used for security information interaction (that is, information interaction with high security requirements, such as remote payment transaction processing in the financial field) Authentication methods are becoming more and more important. [0003] For the Internet-based remote security information interaction process, the existing technical solutions usually use the following two methods for user identity authentication: (1) The user uses a specific hardware security device (such as a USB key) issued by a service provider (such as a bank); , OTP token, etc.); (2) The user pre-connects the information associated ...

AI Technical Summary

Problems solved by technology

[0004] However, the above existing technical solutions have the following problems: (1) For the first method, due to the need to use a specific hardware security device, the convenience and versatility are poor; (2) For the second method, due to the need The user's sensitive information (such as card number) is stored at the gateway of the service provider, and the SMS verification code has the risk of being intercepted and maliciously stolen by a Trojan horse, so the security is low.

Images