Identity authentication system and method

Abstract

The invention discloses an identity authentication system and method, and aims at solving problems of user password lost and stealing in the prior art so that security of user identity can be effectively guaranteed. The identity authentication system comprises a network application server, a user perceptual information database and a perceptual authentication subsystem. After an authentication request initiated by a user to be authenticated is received, perceptual authentication questioning-and-answering is performed between the network application server and the user to be authenticated based on a preset perceptual authentication scene, and authentication answer information is transmitted. The user perceptual information database is used for storing user names of all the registered users and corresponding perceptual information including personality characteristic information, emotional activity information and behavior capability information. The perceptual authentication subsystem is used for verifying whether the authentication answer information of the user to be authenticated is simultaneously matched with the perceptual information corresponding to the user name of the user to be authenticated stored in the user perceptual information database. If the verification result is yes, the user to be authenticated passes the identity authentication through judgment, or the user to be authenticated does not pass the identity authentication through judgment.

Description

technical field

[0001] The invention relates to the technical field of identity authentication, in particular to an identity authentication system and method. Background technique

[0002] Identity authentication, also known as "identity verification" or "identity authentication", refers to the process of confirming the identity of the operator in the computer network system, so as to determine whether the user has access or use rights to certain resources, and then make the computer network system The access policy can be implemented reliably and effectively, preventing attackers from posing as legitimate users to obtain resource access or use rights, ensuring the security of the system and data, and the legitimate interests of authorized visitors.

[0003] Username / password is the simplest and most commonly used identity authentication method, which is based on "what you know" verification means. The password of each user is set by the user himself, and only the user know...

Images