Information-separation-management-based cross-domain safety authentication method

Abstract

The invention relates to an information-separation-management-based cross-domain safety authentication method. A user carries out registration by using a user name Na at a website, and the website establishes an association relationship between the Na and Ca without the need for setting a password of an account; the website establishes a correspondence relationship with an authentication APP by an authentication server, wherein the website establishes a correspondence relationship with the authentication server by the Ca, the authentication server establishes a correspondence relationship between the Ca and an identification code, and the authentication APP establishes a correspondence relationship between an identification code X and the user name Na, and data interaction is carried out based on the above-mentioned correspondence relationships during logging-in steps. According to the invention, complete information of an account of a user is segmented and the segmented information is managed respectively by third parties; and authentication is carried out by executing three authentication links from a website, an authentication server, and a mobile terminal device each time, thereby realizing safety identity authentication. No complete data can be obtained even though one or two links are cracked, so that safety and reliability are improved.

Description

technical field [0001] The invention belongs to the field of network security, and relates to a safe identity authentication method. In particular, in the authentication method, the user does not need to use a password. Specifically, it is a method of dividing and separately managing the user's account information to realize High security level authentication technology. Background technique [0002] At present, with the widespread use of Internet technology in life, almost everyone needs to establish their own account identity in the online world, and the common methods for network identity authentication are mainly "username" and "password"; Life is everywhere, so users need to remember and manage more and more "passwords". However, even so, various new types of password cracking technologies that continue to emerge are still seriously threatening the security of "passwords", especially such as "password dictionary" and "social engineering" (commonly known as "crash libra...

AI Technical Summary

Problems solved by technology

[0002] At present, with the widespread use of Internet technology in life, almost everyone needs to establish their own account identity in the online world, and the common methods for network identity authentication are mainly "username" and "password"; Life is everywhere, so users need to remember and manage more and more "passwords". However, even so, various new types of password cracking technologies that continue to emerge are still seriously threatening the security of "passwords", especially such as "password dictionary" and "social engineering" (commonly known as "crash library"), etc. With the application of password cracking technology, traditional password protection methods are almost difficult to guarantee "password security"

[0003] The root cause of this kind of password security problem is that the network service provider holds the user's account information and password information at the same time, just like putting the key and the lock together. Once the network is attacked, the user account will be leaked. At the same time, The leakage of user account information of a network server will also seriously threaten the security of the user's account in other network service providers, resulting in the security of the user account is often in a very dangerous situation

Images