Identity authentication method, identity authentication device, and server

Abstract

The invention provides an identity authentication method, an identity authentication device, and a server. The method comprises the following steps: acquiring the account information of an account to be accessed and a corresponding electronic key; comparing the acquired account information of the account to be accessed and the acquired corresponding electronic key with pre-stored account information and a pre-stored corresponding electronic key respectively; and generating an operation instruction if the acquired account information of the account to be accessed and the acquired corresponding electronic key are consistent with the pre-stored account information and the pre-stored corresponding electronic key. According to the scheme of the invention, a method combining single-user authentication and multi-user authentication is adopted, joint authentication of multiple users is needed for the access and operation of only a few sensitive data, authentication of a single user is needed for generation operation, the efficiency of daily work is not affected, and the safety of sensitive data and operation is ensured.

Description

technical field [0001] The invention relates to the field of communication security and encryption, in particular to an identity authentication method, device and server. Background technique [0002] At present, the method of treasury authentication is adopted for the sensitive operations of the account. When the user triggers the treasury authentication when performing sensitive operations, it needs to be approved by relevant personnel and receive SMS verification before continuing to operate. However, it is difficult to ensure the monitoring and effective management of sensitive core data operations based on vault certification alone, and it is also difficult to ensure data security and operational supervision by means of SMS verification. [0003] Therefore, the existing technology has the following weak links in the protection and monitoring of sensitive data and operations: [0004] 1. At present, there is a lack of multi-person co-management technology for accounts a...

AI Technical Summary

Problems solved by technology

[0004] 1. At present, there is a lack of multi-person co-management technology for accounts and sensitive operations. 4A (Account, Authentication, Authorization, Audit, referred to as 4A) accounts can pass through the digital certificate authentication of a single user, and some accounts with greater authority are performing sensitive operations. When data is operated, there is a lack of supervision, and it is easy to cause losses to the system or users due to personal intentional or unintentional operations

[0005] 2. At present, for the treasury authentication triggered by sensitive operations, after the authentication is triggered, only one person can pass the approval. There is a certain risk. If this person is negligent and the operator is unsupervised during the operation, it cannot be guaranteed. Security of Sensitive Data and Operations

Images