Financial terminal authentication method and device

Abstract

The invention provides a financial terminal authentication method and a financial terminal authentication device. Authentication information is generated in combination with a bank card number, biological characteristics and a conventional password, specifically, the authentication information is generated in combination with three parameters including the bank card number, the biological characteristics and the conventional password of a user by using a one-way hash function through an operation; the authentication information stored in a bank system server is neither the password and the biological information of the user nor the information of the encrypted password and the encrypted biological information; if any of the three parameters is different, the entirely different authentication information is generated; and the generated authentication information cannot be falsified and cannot be obtained through a password cracking method. According to the financial terminal authentication method and the financial terminal authentication device, the safety problem that the authentication information is stolen and cracked can be prevented, and the final authentication information generated by the same original authentication information such as the same password and the same biological information in a bank system are completely different, and thus the method is high in authentication safety.

Description

technical field [0001] The invention relates to the field of information security, in particular to a financial terminal authentication method and device. Background technique [0002] At present, when domestic bank card users make payment, transfer and other business processing on financial terminals, they generally use password to authenticate the user's identity. For example, credit card payment is generally defaulted to transaction by password, and the ATM machine also uses password to confirm the user's identity. , but it is not secure enough to authenticate users with passwords alone. For example, if criminals steal the user's password through voyeurism, coercion, etc., the criminals can clone the user's bank card in a remote location, and then steal the user's funds by stealing the user's password. This kind of incident Emerging in an endless stream, it brings security risks to users. What's more, after the criminals rob the user's bank card through coercion and oth...

AI Technical Summary

Problems solved by technology

However, biometric features such as fingerprints and irises belong to personal privacy. When used for user identity authentication, improper use may easily cause privacy leakage and cause new security issues.

In order to solve the security problem of authentication information during storage and transmission, the main method currently used is to encrypt these information, such as patent 201110373961.3, which encrypts biological information and user private information through an encryption chip, but from the perspective of cryptography , due to the reversibility of encryption and decryption, there are still huge hidden dangers in the processing of authentication information using encryption. For example, people with ulterior motives can crack weaker passwords through exhaustive dictionary attacks and obtain confidential information of users. Steal user's property and personal privacy

In particular, in order to make the password simple and easy to remember, many users will use the same password to deal with different applications, such as multiple bank cards sharing a password, etc., and the biological characteristics of the same user are also fixed, regardless of whether the authentication information is encrypted. The authentication information of these bank cards is the same. Once the authentication information of one card is stolen, other cards will lose their security at the same time. Therefore, even if encryption is used to encrypt the authentication, there are still potential security risks in the entire authentication process.

Images