A secondary authentication method based on out-of-band verification and enhanced otp mechanism

Abstract

The invention discloses a secondary authentication method based on out-of-band authentication and an enhanced OTP (One-time Password) mechanism. Authentication of a client to a server is added based on a common OTP mechanism, and the client and the server are communicated based on PKI / CA (Public Key Infrastructure / Certificate Authority) by adopting a one-way SSL (Secure Socket Layer) authentication protocol; after secondary authentication is completed, the server adopts an out-of-band secure channel to push a business authentication message to equipment bound to a user based on an equipment fingerprint. After the user affirms the push message on the equipment, a business party can proceed. Meanwhile, mobile equipment of the user is provided with an environment site-cleaning control to prevent Trojan from controlling communication to destroy business security. Through the whole secondary authentication method, threats from phishing and a man-in-the-middle attack of a common OTP token are eliminated, and the method is a good replacement for commonly used short message verification codes in business, such as quick payment, on-line payment and mobile payment.

Description

technical field [0001] The invention relates to the field of information security and to the field of identity authentication, in particular to a secondary authentication method based on out-of-band authentication and enhanced OTP mechanism, which is a strong identity authentication technology. Background technique [0002] Authentication technology is an important aspect of information security theory and technology. Before accessing the security system, the user first needs to be identified by the identity authentication system, and then the system determines whether the user can access a certain resource according to the user's identity and authorization database. Identity authentication plays an extremely important role in the security system. It is the most basic security service, and other security services depend on it. Once the identity authentication system is breached, all the security measures of the system will be useless. The target of hacker attacks is often ...

AI Technical Summary

Problems solved by technology

In fact, in order to prevent forgetting passwords, many users often use strings that are easy to guess such as birthdays and phone numbers as passwords, or copy passwords on paper and put them in a safe place, which can easily cause password leakage

This method has obvious defects: first, it is difficult to remember, and second, it is easy to be deciphered by hackers

The above two methods will lead to the theft of customer passwords, and criminals will use these passwords to steal funds

Images