A method and device for key distribution, dynamic password generation and authentication

Abstract

The invention discloses methods and devices for key distribution, dynamic password generation and authentication, and belongs to the field of information security. The key distribution method comprises that a client sends a key distribution request including a user name to an operation management platform; the client receives a key generation factor and a token identifier from the operation management platform; the client calls a built-in algorithm for calculating a seed key, generates the seed key according to the key generation factor and the token identifier, and saves the token identifier; and the client establishes a security channel with a security domain, and writes the seed key and the token identifier into the security domain via the security channel. According to the methods and the devices, the client downloads the key generation factor from a server platform, and calculates the seed key by using the key generation factor, so that divulgence of the seed key is avoided in the key distribution process; a dynamic token is not needed when a dynamic password is calculated, so that the authentication cost is reduced; and the methods and the devices are convenient to operate, unlikely to go wrong and good in security.

Description

technical field [0001] The present invention relates to the field of information security, in particular to a method and device for key distribution, dynamic password generation and authentication. Background technique [0002] With the rapid development of electronic information, the application of mobile devices (also called mobile terminals) in electronic transactions and system login has become increasingly popular due to their characteristics of portability and flexible operation. In order to improve security, a dynamic password is usually used for identity authentication when using a mobile terminal for electronic transactions or system login. The generation of a dynamic password requires an inherent calculation factor, which is called a seed key. Whether the seed key is safe directly affects the security of electronic transactions or system login. In the prior art, the method of key delivery is usually that the mobile terminal directly downloads the seed key from th...

AI Technical Summary

Problems solved by technology

[0003] In the prior art, there are the following drawbacks in the method of issuing keys and generating dynamic passwords during identity authentication: the mobile terminal or dynamic token directly downloads the seed key from the seed key management system, and the seed key is It is easy to be intercepted by malicious programs, and there is a risk of leaking the seed key; the SQLite file in the mobile terminal is easy to be read by other applications, and there is a risk of leaking the seed key in the storage method; After the dynamic password is generated, the user needs to manually input the dynamic password into the webpage or the client of the mobile terminal, which is inconvenient to operate, prone to errors, and poor in security; when using the dynamic token to download and save the seed key, a mobile terminal is required. Combined with dynamic tokens, compared with only using mobile terminals, the authentication cost is higher, and it is inconvenient to carry

Images