Identity verification method and system of dynamic password based on TEE (Trusted execution environment)

Abstract

The invention discloses an identity verification method of a dynamic password based on a TEE, comprising configuring a dynamic password system in advance by a terminal, a dynamic password generating process and a dynamic password verification process; the terminal is equipped with the TEE; the dynamic password generating process is executed at the terminal and is used for generating the dynamic password according to a user request; the dynamic password verification process is used for verifying the identity of the request user; the verification mode comprises the dynamic password; the dynamic password verification process is executed in the TEE. According to a dynamic password system based on the TEE provided by the invention, a dynamic password generating process, a password operation process and a user verification process are executed in the TEE; sensitive user information such as secret keys, identity information, biological characteristic information and password information are stored in a safe storage module in the TEE; many problems, such as privacy disclosure and hidden danger of property steal resulted from executing the dynamic password generating process in a REE and storing the user sensitive information in the REE, in the prior art are avoided.

Description

technical field [0001] This application relates to the field of information technology, in particular, to a TEE-based dynamic password authentication method and system. Background technique [0002] In order to improve the identity authentication security of network application systems such as online banking, telephone banking, online securities, telephone securities, online shopping, and online games, various industries and enterprises have introduced dynamic password authentication with higher security than traditional static passwords. system. [0003] The dynamic password identity authentication system is used for identity authentication, which greatly improves the security of the network application system. The current main identity authentication methods and their advantages and disadvantages are: [0004] Dynamic password technology and PKI technology are mostly implemented in the form of hardware at present, with high security, and are widely used at present; but t...

AI Technical Summary

Problems solved by technology

[0008] In view of this, the technical problem to be solved by this application is that the existing identity authentication methods are insecure, unstable, inconvenient and low in compatibility

Images