Method of client authorization and authentication based on b/s architecture system

Abstract

The invention discloses a system client authorization authentication method based on a B / S framework. A user needs to apply a unique secret key to authenticate an authorization identity and further to complete the installation of a client, client software obtains a unique physical address MAC address of a host, the unique physical address MAC address is encrypted by MD5 and sent to a server end after being connected with an SALT randomly generated by the system, the user submits a computer terminal authentication application, after verification is passed, the SALT randomly generated by the system is stored in a database, and a Hash value of the MAC address and the SALT is added into an authentication passing list, and the client accesses the authentication. According to the invention, the terminal authorization authentication technology is combined in the B / S framework, various problems of terminal identity authentication by utilizing the mac address through a browser in the B / S framework are effectively solved, the safety problem is also solved, phishing and data interception are avoided, and the probability of illegal users to obtain terminal installation authority is lowered.

Description

technical field [0001] The invention relates to a method for authorization and authentication, in particular to a method for authorization and authentication of a system client based on a B / S architecture. Background technique [0002] The most commonly used method of user authorization under the existing B / S architecture is to implement electronic documents of the digital certificate type in the Activex control, which contains the identity information of the applicant, the public key of one of the secret key pairs, digital signatures and The validity period of the certificate, etc. In the authentication process, the digital signature is used as the user's identity to determine whether the user is legal. Digital certificates have always been considered the most secure pass in the network, because digital certificates are often certified and managed by a third party. But because of this, service providers also bear the risk of uncontrollable security while increasing costs....

AI Technical Summary

Problems solved by technology

However, with the continuous development of these authorization technologies, such as SQL injection, phishing and other hacker technologies, simply using a single user authorization and identification method can no longer meet the needs of users

Images