An offline authentication method, server and system

Abstract

The invention discloses an offline authentication method. The method comprises: a first server receives an offline authentication request from a third-party application, wherein the offline authentication request comprises a user identification and first authentication information generated by a client, and wherein a corresponding relation of the user identification to a third-party account is saved in the third-party application; the offline authentication request is sent to a second server, and the second server obtains second authentication information according to the user identification and returns an authentication result after comparing the first authentication information and the second authentication information, wherein the second authentication information is generated by the second server; and the first server receives an authentication result and then sends the authentication result to the third-party application so that the third-party application logs in to or authorizes the third-party account according to the authentication result. The invention also correspondingly discloses the first server, the second server and an offline authentication system.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to an off-line authentication method, server and system. Background technique [0002] With the development of Internet technology, user security authentication in various applications has become a major concern. [0003] Most websites log in by entering the user account name and account password without additional identity authentication. This traditional login method has low security (some websites even have security holes in plaintext storage), and is very likely to be hijacked by illegal elements, resulting in the leakage of user accounts and privacy. Moreover, in practical applications, users usually set the same account information in multiple different websites. When the account name and password of one website are leaked, it may cause security risks in multiple websites. In particular, when some sensitive operations are involved, such as transactions, transfers, etc....

AI Technical Summary

Problems solved by technology

This traditional login method has low security (some websites even have security holes in plaintext storage), and is very likely to be hijacked by illegal elements, resulting in the leakage of user accounts and privacy

Moreover, in practical applications, users usually set the same account information in multiple different websites. When the account name and password of one website are leaked, it may cause potential security risks for multiple websites.

In particular, when it comes to some sensitive operations, such as transactions, transfers, etc., direct authorization and permission without any authentication of user identity may directly lead to economic losses

[0004] At present, it is usually adopted to send a text message containing a verification code to the user's mobile terminal, or push the authentication interface to the user's mobile terminal through the network. The former requires the user to enter the verification code, which is cumbersome to operate, while the latter requires the user's mobile terminal to be connected to the Internet. can only be used in the case of

Images