Password authentication method with high security

Abstract

The invention discloses a password authentication method with high security. By employing the mode of combining smart card hardware with a cipher algorithm, the method can be applied to the security mechanism of a series of network services such as finance, online shopping, social activities, and security. According to the method, the combination of a smart card and password authentication is focused, four stages of user registration, login, mutual authentication of a server and a user, and user password change are included, lightweight, high-efficiency and secure cipher protocols and methods such as Hash function, XOR operation, and symmetric keys are mainly applied, the security is high, special security processing of usernames and passwords is performed in an information transmission process, the stolen risk for the usernames and the passwords is reduced, replay attacks and information block attacks can be effectively prevented, and the users can freely change the passwords without the server.

Description

technical field [0001] The invention belongs to the technical fields of information security and cryptography, and in particular relates to a high-security password authentication method combined with a smart card. Background technique [0002] With the rapid development of computer network technology, cloud computing and cloud storage technology enable a large amount of data originally stored in the client to be stored in the cloud server. This not only greatly releases the storage space of the user end, reduces the pressure of local storage data, but also greatly expands the space range of user storage data, and realizes the sharing of data among different users. However, with the increase in the number of users using cloud services, how to protect user privacy from infringement has become a problem that cannot be ignored in the process of social informatization development. [0003] In response to the above problems, people have designed a variety of authentication mecha...

AI Technical Summary

Problems solved by technology

However, this kind of data sharing technology that relies purely on encryption technology still has complex algorithms, and the algorithm needs to be updated in a timely manner to prevent the risk of being decrypted.

Images