System and method for authentication and identification based on fuzzy fault and one-time password

Abstract

The invention provides a system and a method for authentication and identification based on a fuzzy fault and a one-time password. The method comprises the following steps that firstly, a one-time password sequence is generated through distributing an independent seed for each user, the generated one-time password sequence is input into a fuzzy fault algorithm to carry out fragmentation processing, and a server and a user respectively store fragmented fragment sequences; and during authentication, the server returns the fragments and recovers at the user, after recovery is successful, the user holds a combined one-time password token to visit the server, the server verifies validity of the one-time password, if the one-time password is valid, the server allows the one-time password to visit and update a next criterion, and after authentication is successful, the one-time password automatically becomes invalid. The system and the method for authentication and identification based on the fuzzy fault and the one-time password, which are provided by the invention, have the advantages of simple identification process, high safety performance and low cost.

Description

technical field [0001] The invention relates to the field of information security, in particular to an authentication identification system and method based on fuzzy vaults and one-time passwords. Background technique [0002] As a resource, information is of special significance to human beings due to its universality, sharing, value-added, processability and multi-utility. The essence of information security is to protect information resources in information systems or information networks from various types of threats, interference and destruction, that is, to ensure the security of information. With the continuous development of Internet technology, while the Internet brings convenience to people's lives, the network security situation is becoming more and more severe. It is not uncommon for users to have their bank accounts stolen, funds stolen, and user identities fraudulently used. Identity authentication technology is an important way to ensure information security....

AI Technical Summary

Problems solved by technology

The current identity authentication technologies are mainly divided into static passwords and dynamic passwords. Static passwords have low security performance and are unreliable; dynamic passwords also have major security risks. At the same time, dynamic passwords also have the problems of inconvenient use and high cost.

[0004] In order to strengthen security protection, a kind of identity authentication method based on static password or dynamic password plus state identification information appears continuously, for example, the patent document with publication number CN104811443A proposes a kind of identity authentication method of obtaining motion state information plus registration information, The patent document with the publication number CN104734852A proposes an identity authentication method using a camera device to determine the user's face information; the above identity authentication methods all have the problems of complicated identification process, large environmental factors interference and high cost

Images