Authentication system and working method thereof

Abstract

The invention discloses an authentication system and a working method thereof and belongs to the information security field. The method includes the following steps that: when receiving an access request, a server generates a first challenge value and sends the first challenge value to a client; the client uses a preset Hash algorithm to carry out Hash calculation on the first challenge value to generate a challenge Hash value; when judging that a received identification code is matched with a pairing code stored in an identity authentication module, the identity authentication module uses a private key corresponding to the pairing code to calculate the challenge the Hash value according to a preset signature algorithm so as to obtain a signature value; the client generates a signature verification request according to the signature value and sends the signature verification request to the server; and the server authenticates the signature verification request, and a user is allowed to access requested resources if the authentication is successful, and the user is not allowed to access the requested resources if the verification fails. With the authentication system and the working method thereof provided by the technical schemes of the invention adopted, communication can be continued as long as the identity authentication module completes local authentication, and therefore, the problem of data leakage in a data transmission process can be prevented, and the security of the communication can be improved.

Description

technical field [0001] The invention relates to the field of information security, in particular to an authentication system and a working method thereof. Background technique [0002] In the prior art, authentication devices (including fingerprint authentication devices, voiceprint authentication devices, face authentication devices, location authentication devices, iris authentication devices, gesture authentication devices, palmprint authentication devices, etc.) and servers can only be realized through the client. For data interaction, first of all, data leakage may occur during the transmission process, and the security is relatively low. Contents of the invention [0003] In order to solve the problems in the prior art, the invention provides an authentication system and its working method. [0004] An embodiment of the present invention provides a working method of an authentication system, the authentication system includes a server, a client, and an independent i...

AI Technical Summary

Problems solved by technology

[0002] In the prior art, authentication devices (including fingerprint authentication devices, voiceprint authentication devices, face authentication devices, location authentication devices, iris authentication devices, gesture authentication devices, palmprint authentication devices, etc.) and servers can only be realized through the client. Data interaction, first of all, data leakage may occur during the transmission process, and the security is relatively low

Images